CVE-2004-2751

概要

参考情報

• archives.neohapsis.com/archives/vulnwatch/2003-q1/0117.html · Exploit
• community.postnuke.com/Article2535.htm · Patch
• lists.postnuke.com/pipermail/postnuke-security/2004q1/000001.html
• securitytracker.com/id
• derkeiler.com/Mailing-Lists/securityfocus/bugtraq/2004-01/0015.html · Patch
• gulftech.org/01032004.php
• osvdb.org/3334
• exchange.xforce.ibmcloud.com/vulnerabilities/11500

postnuke のその他の脆弱性

• CVE-2007-0386緊急 10.0Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."
• CVE-2007-0385高 7.8The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the full path) via "unvalidated output" in FAQ/in…
• CVE-2007-0384中 5.1Cross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764 allows remote attackers to inject arbitrary web…
• CVE-2006-6267高 7.8PostNuke 0.7.5.0, and certain minor versions, allows remote attackers to obtain sensitive information via a non-numeric value of the stop pa…
• CVE-2006-6233高 7.5SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL comman…