CVE-2002-2015

Description

References

• archives.neohapsis.com/archives/bugtraq/2002-03/0345.html
• iss.net/security_center/static/8699.php · Patch
• securityfocus.com/bid/4381 · Exploit

Altre vulnerabilità di postnuke

• CVE-2007-0386CRITICO 10.0Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."
• CVE-2007-0385ALTO 7.8The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the full path) via "unvalidated output" in FAQ/in…
• CVE-2007-0384MEDIO 5.1Cross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764 allows remote attackers to inject arbitrary web…
• CVE-2006-6267ALTO 7.8PostNuke 0.7.5.0, and certain minor versions, allows remote attackers to obtain sensitive information via a non-numeric value of the stop pa…
• CVE-2006-6233ALTO 7.5SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL comman…