Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

postnuke software foundation postnuke vulnerabilities and exploits

(subscribe to this query)
265
VMScore
CVE-2006-0800
Interpretation conflict in PostNuke 0.761 and previous versions allows remote malicious users to conduct cross-site scripting (XSS) attacks via HTML tags with a trailing "<" character, which is interpreted as a ">" character by some web browsers but bypa...
Postnuke Software Foundation Postnuke 0.71Postnuke Software Foundation Postnuke 0.72Postnuke Software Foundation Postnuke 0.76 Rc4Postnuke Software Foundation Postnuke 0.76 Rc4aPostnuke Software Foundation Postnuke 0.63Postnuke Software Foundation Postnuke 0.64Postnuke Software Foundation Postnuke 0.73Postnuke Software Foundation Postnuke 0.74Postnuke Software Foundation Postnuke 0.761aPostnuke Software Foundation Postnuke 0.62Postnuke Software Foundation Postnuke 0.721Postnuke Software Foundation Postnuke 0.726.3Postnuke Software Foundation Postnuke 0.76 Rc4bPostnuke Software Foundation Postnuke 0.761Postnuke Software Foundation Postnuke 0.7Postnuke Software Foundation Postnuke 0.70Postnuke Software Foundation Postnuke 0.703Postnuke Software Foundation Postnuke 0.75Postnuke Software Foundation Postnuke 0.75 Rc3
668
VMScore
CVE-2006-6233
SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote malicious users to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in d...
Postnuke Software Foundation Postnuke 0.76 Rc4bPostnuke Software Foundation Postnuke 0.760 Rc2Postnuke Software Foundation Postnuke 0.76 Rc4Postnuke Software Foundation Postnuke 0.76 Rc4aPostnuke Software Foundation Postnuke 0.762Postnuke Software Foundation Postnuke 0.763Postnuke Software Foundation Postnuke 0.760 Rc3Postnuke Software Foundation Postnuke 0.760 Rc4Postnuke Software Foundation Postnuke 0.761Postnuke Software Foundation Postnuke 0.761a
231
VMScore
CVE-2002-1996
Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and previous versions allows remote malicious users to inject arbitrary web script or HTML via the (1) name parameter in modules.php and (2) catid parameter in index.php.
Postnuke Software Foundation Postnuke 0.62Postnuke Software Foundation Postnuke 0.63Postnuke Software Foundation Postnuke 0.64Postnuke Software Foundation Postnuke 0.7Postnuke Software Foundation Postnuke 0.703Postnuke Software Foundation Postnuke 0.70Postnuke Software Foundation Postnuke 0.71
445
VMScore
CVE-2005-1621
Directory traversal vulnerability in the pnModFunc function in pnMod.php for PostNuke 0.750 up to and including 0.760rc4 allows remote malicious users to read arbitrary files via a .. (dot dot) in the func parameter to index.php.
Postnuke Software Foundation Postnuke 0.750Postnuke Software Foundation Postnuke 0.760 Rc4Postnuke Software Foundation Postnuke 0.760 Rc2Postnuke Software Foundation Postnuke 0.760 Rc3
231
VMScore
CVE-2005-1695
Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remote malicious users to inject arbitrary web script or HTML via the (1) rss_url parameter to magpie_slashbox.php, or the url parameter to (2) magpie_simple.php or ...
Postnuke Software Foundation Postnuke 0.750Postnuke Software Foundation Postnuke 0.760 Rc2Postnuke Software Foundation Postnuke 0.760 Rc3
605
VMScore
CVE-2004-2751
SQL injection vulnerability in the members_list module in PostNuke 0.726, and possibly earlier, allows remote malicious users to execute arbitrary SQL commands via the sortby parameter.
Postnuke Software Foundation Postnuke 0.722Postnuke Software Foundation Postnuke 0.723Postnuke Software Foundation Postnuke 0.726
231
VMScore
CVE-2001-1521
Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote malicious users to inject arbitrary web script or HTML via the uname parameter.
Postnuke Software Foundation Postnuke 0.63Postnuke Software Foundation Postnuke 0.64Postnuke Software Foundation Postnuke 0.62
755
VMScore
CVE-2001-1460
SQL injection vulnerability in article.php in PostNuke 0.62 up to and including 0.64 allows remote malicious users to bypass authentication via the user parameter.
Postnuke Software Foundation Postnuke 0.64Postnuke Software Foundation Postnuke 0.62Postnuke Software Foundation Postnuke 0.63
510
VMScore
CVE-2002-0535
Cross-site scripting vulnerabilities in PostBoard 2.0.1 and previous versions allows remote malicious users to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.
Postboard Postboard 2.0Postboard Postboard 2.0.1Postnuke Software Foundation Postnuke 0.64Postnuke Software Foundation Postnuke 0.71Postnuke Software Foundation Postnuke 0.70Postnuke Software Foundation Postnuke 0.703
755
VMScore
CVE-2006-5733
Directory traversal vulnerability in error.php in PostNuke 0.763 and previous versions allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the PNSVlang (PNSV lang) cookie, as demonstrated by injecting PHP sequences into an Apache HTTP ...
Postnuke Software Foundation Postnuke 0.762Postnuke Software Foundation Postnuke
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-21111CVE-2024-32884IDORCVE-2023-1000CVE-2024-33260CVE-2024-3682reflected XSSrace conditionCVE-2024-3400
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook