Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Sql injection in PostNuke [Admin section] Sep 29 2006 06:13AM
Omid (omid hackers ir)
Hi,
There is a sql injection bug in PostNuke 0.762 admin section (and maybe
before versions) .
The "hits" parameter is not checked properly before be used in sql query :

File /modules/Downloads/admin.php, Line 1586 :
:: $dbconn->Execute("INSERT INTO $downtable
:: ($colum...

[ more ]  




 

Privacy Statement
Copyright 2009, SecurityFocus