NetSight
high7.5

CVE-2005-0617

SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter.

Impact

SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter.

Affected products

VendorProductAffected versions
Postnuke Software FoundationPostnuke
Versions 0.750, 0.760_rc2

References