high7.5
CVE-2005-0617
SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter.
Impact
SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Postnuke Software Foundation | Postnuke | Versions 0.750, 0.760_rc2 |