CVEvulnerability
CVE-2005-1694
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2005-05-24
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
Description
Multiple SQL injection vulnerabilities in Xanthia.php in the Xanthia module in PostNuke 0.750 allow remote attackers to execute arbitrary SQL commands via the (1) name or (2) module parameter.
Affected configurations
• postnuke software foundation postnuke 0.750
References
- http://marc.info/?l=bugtraq&m=111670823128472&w=2 marc.info
- http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691 Patch, Vendor Advisory
- http://marc.info/?l=bugtraq&m=111670823128472&w=2 marc.info
- http://news.postnuke.com/modules.php?op=modload&name=News&file=article&sid=2691 Patch, Vendor Advisory