Vulnerabilities > Postnuke Software Foundation > Postnuke > 0.762
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2006-12-02 | CVE-2006-6233 | SQL-Injection vulnerability in Postnuke SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. | 7.5 |
2006-11-06 | CVE-2006-5733 | Local File Include vulnerability in Postnuke Software Foundation Postnuke 0.762 Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local files via a .. | 7.5 |
2006-10-03 | CVE-2006-5121 | SQL Injection vulnerability in Postnuke Software Foundation Postnuke 0.762 SQL injection vulnerability in modules/Downloads/admin.php in the Admin section of PostNuke 0.762 allows remote attackers to execute arbitrary SQL commands via the hits parameter. | 7.5 |