CVE-2005-1777

PostNuke 0.750 - SQL Injection via readpmsg.php start Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2005-1777. PoCs published by K-C0d3r.

AI-analyzed exploit summary This Perl script exploits a SQL injection vulnerability in PostNuke 0.750 by injecting a malicious SQL query via the 'Messages' module. It retrieves the admin username and MD5 password hash from the database.

Description

SQL injection vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to execute arbitrary SQL commands via the start parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED

by K-C0d3r · perlwebappsphp

https://www.exploit-db.com/exploits/1030

View Code ZIP pw:eip

This Perl script exploits a SQL injection vulnerability in PostNuke 0.750 by injecting a malicious SQL query via the 'Messages' module. It retrieves the admin username and MD5 password hash from the database.

Classification

Working Poc 95%

Attack Type

Sqli

Complexity

Trivial

Reliability

Reliable

Target: PostNuke 0.750

No auth needed

Prerequisites: Target must be running PostNuke 0.750 with the Messages module accessible

MITRE ATT&CK

T1189 - Drive-by Compromise T1505 - Server Software Component

devstral-2 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3

Core References

Mailing List mailing-list x_refsource_bugtraq

http://marc.info/?l=bugtraq&m=111721364707520&w=2

Third Party Advisory, VDB Entry vdb-entry x_refsource_sectrack

http://securitytracker.com/id?1014066

Patch, Vendor Advisory x_refsource_confirm

http://news.postnuke.com/Article2691.html

Scores

EPSS 0.0116

EPSS Percentile 63.1%

Details

Status published

Products (1)

postnuke_software_foundation/postnuke 0.750

Published May 31, 2005

Tracked Since Feb 18, 2026