Lucene search
MitreCVE-2005-1048HistoryMay 02, 2005 - 4:00 a.m.
CVE-2005-1048
2005-05-0204:00:00
mitre
web.nvd.nist.gov
22
cve
2005
1048
sql injection
postnuke
security vulnerability
remote attackers
arbitrary sql statements
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.6
Confidence
Low
EPSS
0.008
Percentile
81.6%
SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid parameter. NOTE: the vendor reports that they could not reproduce the issues for 760 RC3, or for .750.
Affected configurations
Node
postnuke_software_foundationpostnukeMatch0.760_rc3
| Vendor | Product | Version | CPE |
|---|---|---|---|
| postnuke_software_foundation | postnuke | 0.760_rc3 | cpe:2.3:a:postnuke_software_foundation:postnuke:0.760_rc3:*:*:*:*:*:*:* |
CVSS2
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
AI Score
8.6
Confidence
Low
EPSS
0.008
Percentile
81.6%
Related for CVE-2005-1048