CVE-2007-0384

Description

References

• archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.html
• noc.postnuke.com/plugins/scmsvn/viewcvs.php/trunk/Historic/PostNuke7x/html/modules
• osvdb.org/35473
• hackers.ir/advisories/festival.txt
• securityfocus.com/bid/22119

postnuke의 다른 취약점

• CVE-2007-0386심각 10.0Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."
• CVE-2007-0385높음 7.8The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the full path) via "unvalidated output" in FAQ/in…
• CVE-2006-6267높음 7.8PostNuke 0.7.5.0, and certain minor versions, allows remote attackers to obtain sensitive information via a non-numeric value of the stop pa…
• CVE-2006-6233높음 7.5SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL comman…
• CVE-2006-5733높음 7.5Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local …