postnuke software foundation postnuke 0.76 rc4b vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote malicious users to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in d...

Postnuke Software Foundation Postnuke 0.761 Postnuke Software Foundation Postnuke 0.760 Rc4 Postnuke Software Foundation Postnuke 0.760 Rc3 Postnuke Software Foundation Postnuke 0.760 Rc2 Postnuke Software Foundation Postnuke 0.762 Postnuke Software Foundation Postnuke 0.763 Postnuke Software Foundation Postnuke 0.76 Rc4b Postnuke Software Foundation Postnuke 0.76 Rc4 Postnuke Software Foundation Postnuke 0.761a Postnuke Software Foundation Postnuke 0.76 Rc4a

Interpretation conflict in PostNuke 0.761 and previous versions allows remote malicious users to conduct cross-site scripting (XSS) attacks via HTML tags with a trailing "<" character, which is interpreted as a ">" character by some web browsers but bypa...

Postnuke Software Foundation Postnuke 0.71 Postnuke Software Foundation Postnuke 0.761 Postnuke Software Foundation Postnuke 0.63 Postnuke Software Foundation Postnuke 0.64 Postnuke Software Foundation Postnuke 0.703 Postnuke Software Foundation Postnuke 0.76 Rc4b Postnuke Software Foundation Postnuke 0.726.3 Postnuke Software Foundation Postnuke 0.76 Rc4 Postnuke Software Foundation Postnuke 0.721 Postnuke Software Foundation Postnuke 0.75 Rc3 Postnuke Software Foundation Postnuke 0.761a Postnuke Software Foundation Postnuke 0.73 Postnuke Software Foundation Postnuke 0.74 Postnuke Software Foundation Postnuke 0.75 Postnuke Software Foundation Postnuke 0.76 Rc4a Postnuke Software Foundation Postnuke 0.72 Postnuke Software Foundation Postnuke 0.70 Postnuke Software Foundation Postnuke 0.62 Postnuke Software Foundation Postnuke 0.7

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote malicious users to inject arbitrary web script or HTML via (1) the moderate parameter to the Comments module or (2) htmltext parameter to html/user.php.

Postnuke Software Foundation Postnuke 0.76 Rc4b

2 EDB exploits

SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute arbitrary SQL commands via the show parameter to dl-viewdownload.php.

Postnuke Software Foundation Postnuke 0.76 Rc4b

1 EDB exploit

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook