İçeriğe atla
Noroxi

postnuke software foundation kayıtları

postnuke software foundation üreticisine ait 49 yayımlanmış kayıt.

Araştırmacı profili

KEV’e giren
0 · %0
Silahlaştırılmış
0 · %0
Pre-auth RCE
22
Düzeltme kaydı olan
%4,1
Yayından KEV’e ortanca
KEV’e giren kayıt yok

Yıllara göre kayıt

    Çubuk: toplam · koyu kısım: CISA KEV.

    Tekrar eden sınıflar

    Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.

    CWE

    Saldırı profili

    Tüm kayıtlar

    49 kayıt
    • CVE-2007-0386
      40Planlayın

      Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug."

      KritikCVSS 10,0İstismar yokEPSS %1

      postnuke software foundation · postnuke19 Oca 2007

    • CVE-2006-0146
      34İzleyin

      The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Ca

      YüksekCVSS 7,5Kavram kanıtıEPSS %13

      mantis · mantis9 Oca 2006

    • CVE-2006-0147
      34İzleyin

      Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (

      YüksekCVSS 7,5Kavram kanıtıEPSS %13

      john lim · adodb9 Oca 2006

    • CVE-2006-4968
      33İzleyin

      PHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to execute arbitrary PHP cod

      YüksekCVSS 7,5Kavram kanıtıEPSS %9

      postnuke software foundation · pnphpbb24 Eyl 2006

    • CVE-2002-2015
      33İzleyin

      PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code

      YüksekCVSS 7,5Kavram kanıtıEPSS %9

      postnuke software foundation · postnuke31 Ara 2002

    • CVE-2001-0911
      31İzleyin

      PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by s

      YüksekCVSS 7,5İstismar yokEPSS %3

      francisco burzi · php-nuke21 Kas 2001

    • CVE-2001-1460
      31İzleyin

      SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user param

      YüksekCVSS 7,5Kavram kanıtıEPSS %3

      postnuke software foundation · postnuke13 Eki 2001

    • CVE-2006-5733
      31İzleyin

      Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local

      YüksekCVSS 7,5Kavram kanıtıEPSS %3

      postnuke software foundation · postnuke6 Kas 2006

    • CVE-2007-3052
      31İzleyin

      SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary S

      YüksekCVSS 7,5Kavram kanıtıEPSS %2

      postnuke software foundation · pnphpbb5 Haz 2007

    • CVE-2004-1949
      31İzleyin

      SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the sif parameter to inde

      YüksekCVSS 7,5İstismar yokEPSS %1

      postnuke software foundation · postnuke31 Ara 2004

    • CVE-2002-0739
      31İzleyin

      Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a cal

      YüksekCVSS 7,5İstismar yokEPSS %1

      postnuke software foundation · postcalendar12 Ağu 2002

    • CVE-2007-0385
      31İzleyin

      The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the full path) via "unvalidated output" in FAQ/in

      YüksekCVSS 7,8İstismar yokEPSS %1

      postnuke software foundation · postnuke19 Oca 2007

    • CVE-2006-6267
      31İzleyin

      PostNuke 0.7.5.0, and certain minor versions, allows remote attackers to obtain sensitive information via a non-numeric value of the stop pa

      YüksekCVSS 7,8İstismar yokEPSS %1

      postnuke software foundation · postnuke4 Ara 2006

    • CVE-2005-1048
      30İzleyin

      SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid par

      YüksekCVSS 7,5İstismar yokEPSS %1

      postnuke software foundation · postnuke2 May 2005

    • CVE-2006-5121
      30İzleyin

      SQL injection vulnerability in modules/Downloads/admin.php in the Admin section of PostNuke 0.762 allows remote attackers to execute arbitra

      YüksekCVSS 7,5İstismar yokEPSS %1

      postnuke software foundation · postnuke3 Eki 2006

    • CVE-2004-1787
      30İzleyin

      SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries.

      YüksekCVSS 7,5İstismar yokEPSS %1

      postnuke software foundation · postcalendar31 Ara 2004

    • CVE-2007-2492
      30İzleyin

      SQL injection vulnerability in index.php in the v4bJournal module for PostNuke allows remote authenticated users to execute arbitrary SQL co

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      postnuke software foundation · postnuke v4bjournal module3 May 2007

    • CVE-2005-0617
      30İzleyin

      SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via t

      YüksekCVSS 7,5İstismar yokEPSS %1

      postnuke software foundation · postnuke2 May 2005

    • CVE-2005-0615
      30İzleyin

      Multiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in PostNuke 0.760-RC2 allow remote attackers to e

      YüksekCVSS 7,5İstismar yokEPSS %1

      postnuke software foundation · postnuke2 May 2005

    • CVE-2006-6233
      30İzleyin

      SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL comman

      YüksekCVSS 7,5İstismar yokEPSS %1

      postnuke software foundation · postnuke2 Ara 2006

    • CVE-2005-1777
      30İzleyin

      SQL injection vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to execute arbitrary SQL commands via the start parame

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      postnuke software foundation · postnuke31 May 2005

    • CVE-2005-1694
      30İzleyin

      Multiple SQL injection vulnerabilities in Xanthia.php in the Xanthia module in PostNuke 0.750 allow remote attackers to execute arbitrary SQ

      YüksekCVSS 7,5İstismar yokEPSS %1

      postnuke software foundation · postnuke24 May 2005

    • CVE-2008-2012
      30İzleyin

      SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute arbitrary SQL comman

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      postnuke software foundation · postschedule29 Nis 2008

    • CVE-2007-3584
      30İzleyin

      SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execute arbitrary SQL comm

      YüksekCVSS 7,5Kavram kanıtıEPSS %1

      postnuke software foundation · pnphpbb25 Tem 2007

    • CVE-2005-2690
      30İzleyin

      SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute arbitrary SQL commands

      YüksekCVSS 7,5Kavram kanıtıEPSS %0

      postnuke software foundation · postnuke24 Ağu 2005