high7.5Public exploit code
CVE-2001-1460
SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PostNuke 0.6 - User Login2001-10-13 · webapps · php · Verified
Impact
SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Postnuke Software Foundation | Postnuke | Versions 0.62, 0.63, 0.64 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-10/0088.html
- http://archives.neohapsis.com/archives/bugtraq/2001-10/0091.html
- http://www.kb.cert.org/vuls/id/921547
- http://www.securityfocus.com/bid/3435
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7280
- http://archives.neohapsis.com/archives/bugtraq/2001-10/0088.html
- http://archives.neohapsis.com/archives/bugtraq/2001-10/0091.html
- http://www.kb.cert.org/vuls/id/921547
- http://www.securityfocus.com/bid/3435
- https://exchange.xforce.ibmcloud.com/vulnerabilities/7280