NVD

Id
72326  
Name
CVE-2004-1949  
Description
SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the sif parameter to index.php in the Comments module or (2) timezoneoffset parameter to changeinfo.php in the Your_Account module.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2004-12-31  
Modified Date
2017-07-10  
Seq
2004-1949  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
373360 72326 CVE-2004-1949 20040414 [SCAN Associates Sdn Bhd Security Advisory] Postnuke v 0.726 and below SQL injection  View
373361 72326 CVE-2004-1949 20040420 [PNSA 2004-2] PostNuke Security Advisory PNSA 2004-2  View
373362 72326 CVE-2004-1949 http://news.postnuke.com/Article2580.html  View
373363 72326 CVE-2004-1949 1009801  View
373364 72326 CVE-2004-1949 10146  View
373365 72326 CVE-2004-1949 postnuke-indexphp-sql-injection(15869)  View
373366 72326 CVE-2004-1949 postnuke-changeinfo-sql-injection(15875)  View

Related JVN