Exploitation Summary
EIP tracks 1 public exploit for CVE-2001-1460. PoCs published by anonymous.
AI-analyzed exploit summary The writeup describes an SQL injection vulnerability in PostNuke versions 0.62 to 0.64, allowing remote attackers to bypass authentication by manipulating a base64-encoded string passed to the 'article.php' script. The exploit leverages improper input filtering to alter a MySQL query and log in as any user with a known username and ID.
Description
SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter.
Exploits (1)
The writeup describes an SQL injection vulnerability in PostNuke versions 0.62 to 0.64, allowing remote attackers to bypass authentication by manipulating a base64-encoded string passed to the 'article.php' script. The exploit leverages improper input filtering to alter a MySQL query and log in as any user with a known username and ID.