Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 41

Export CSV
CVE-2004-1949

SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the sif parameter to index.php in the Comments module or (2) timezoneoffset parameter to changeinfo.php in the Your_Account module.

CVSS 2.0 · 7.5 High EPSS 2.0% KEV · Not listed
Vendors
Postnuke Software Foundation
Products
Postnuke