CVE-2005-1049

Mô tả

Tham khảo

• cvs.postnuke.com/viewcvs.cgi/Historic_PostNuke_Library/postnuke-devel/html/user.php.diff · Patch
• digitalparadox.org/advisories/postnuke.txt
• marc.info
• news.postnuke.com/modules.php · Patch
• secunia.com/advisories/14868 · Exploit
• securitytracker.com/id
• osvdb.org/15370
• securityfocus.com/bid/13075 · Exploit
• securityfocus.com/bid/13076 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/20018

Lỗ hổng khác của postnuke

• CVE-2007-0386NGHIÊM TRỌNG 10.0Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."
• CVE-2007-0385CAO 7.8The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the full path) via "unvalidated output" in FAQ/in…
• CVE-2007-0384TRUNG BÌNH 5.1Cross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764 allows remote attackers to inject arbitrary web…
• CVE-2006-6267CAO 7.8PostNuke 0.7.5.0, and certain minor versions, allows remote attackers to obtain sensitive information via a non-numeric value of the stop pa…
• CVE-2006-6233CAO 7.5SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL comman…