CVE

Id
11177  
CVE No.
CVE-2004-2751  
Status
Candidate  
Description
SQL injection vulnerability in the members_list module in PostNuke 0.726, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the sortby parameter.  
Phase
Assigned (20071113)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
78843 11177 CVE-2004-2751 BUGTRAQ:20040102 PostNuke Issues (0.726 && Possibly Older)  View
78844 11177 CVE-2004-2751 URL:http://www.derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html  View
78845 11177 CVE-2004-2751 VULNWATCH:20030309 Postnuke v 0.723 SQL injection and directory traversing  View
78846 11177 CVE-2004-2751 URL:http://archives.neohapsis.com/archives/vulnwatch/2003-q1/0117.html  View
78847 11177 CVE-2004-2751 MISC:http://www.gulftech.org/01032004.php  View
78848 11177 CVE-2004-2751 CONFIRM:http://community.postnuke.com/Article2535.htm  View
78849 11177 CVE-2004-2751 CONFIRM:http://lists.postnuke.com/pipermail/postnuke-security/2004q1/000001.html  View
78850 11177 CVE-2004-2751 OSVDB:3334  View
78851 11177 CVE-2004-2751 URL:http://www.osvdb.org/3334  View
78852 11177 CVE-2004-2751 SECTRACK:1008629  View
78853 11177 CVE-2004-2751 URL:http://securitytracker.com/id?1008629  View
78854 11177 CVE-2004-2751 XF:postnuke-memberslist-sql-injection(11500)  View

Related JVN