CVE-2005-1697

概要

参考情報

• marc.info · Third Party Advisory

postnuke のその他の脆弱性

• CVE-2010-1713高 7.5SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands via the sid parameter…
• CVE-2008-1591高 7.5The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magic_quotes_runtime is enabled, which allows rem…
• CVE-2005-1698中 5.0PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to (1) theme.php or (2) Xanthia.php…