| Package | Affected versions | Patched versions |
|---|---|---|
| postnuke | = 0.760_rc2= 0.760_rc3= 0.760_rc4= 0.761= 0.761a= 0.762= 0.763= 0.76_rc4= 0.76_rc4a= 0.76_rc4b |
SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in dl-downloaddetails.php, but PostNuke 0.764 does not appear to have this issue.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free