7.5
CVE-2006-5121
- EPSS 1.35%
- Veröffentlicht 03.10.2006 04:03:00
- Zuletzt bearbeitet 16.06.2026 22:30:32
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
LoginSQL injection vulnerability in modules/Downloads/admin.php in the Admin section of PostNuke 0.762 allows remote attackers to execute arbitrary SQL commands via the hits parameter.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Postnuke Software Foundation ≫ Postnuke Version0.762
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 1.35% | 0.68 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 7.5 | 10 | 6.4 |
AV:N/AC:L/Au:N/C:P/I:P/A:P
|
http://community.postnuke.com/index.php?name=News&file=article&sid=2783
http://secunia.com/advisories/22197
http://securityreason.com/securityalert/1669
http://www.securityfocus.com/archive/1/447361/100/0/threaded
http://www.securityfocus.com/bid/20317
http://www.vupen.com/english/advisories/2006/3886
https://exchange.xforce.ibmcloud.com/vulnerabilities/29271