CVE-2001-1460

PostNuke <0.64 - SQL Injection

Title source: llm
STIX 2.1

Description

SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED
by anonymous · textwebappsphp
https://www.exploit-db.com/exploits/21119

References (5)

Core 5
Core References
Third Party Advisory, US Government Resource third-party-advisory x_refsource_cert-vn
http://www.kb.cert.org/vuls/id/921547
Third Party Advisory mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2001-10/0091.html
Patch vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/3435
Exploit, Patch mailing-list x_refsource_bugtraq
http://archives.neohapsis.com/archives/bugtraq/2001-10/0088.html
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/7280

Scores

EPSS 0.0332
EPSS Percentile 87.4%

Details

Status published
Products (3)
postnuke_software_foundation/postnuke 0.62
postnuke_software_foundation/postnuke 0.63
postnuke_software_foundation/postnuke 0.64
Published Oct 13, 2001
Tracked Since Feb 18, 2026