PS
Vendor
Postnuke Software Foundation
47
CVEs
0
On KEV
0
New 30D
Products
PO–
Postnuke
Postnuke Software Foundation
38 CVEs0 on KEV0 new
PN–
Pnphpbb
Postnuke Software Foundation
2 CVEs0 on KEV0 new
PO–
Postcalendar
Postnuke Software Foundation
2 CVEs0 on KEV0 new
PA–
Pagesetter
Postnuke Software Foundation
1 CVEs0 on KEV0 new
PN–
Pnencyclopedia
Postnuke Software Foundation
1 CVEs0 on KEV0 new
PN–
Pnphpbb2
Postnuke Software Foundation
1 CVEs0 on KEV0 new
PV–
Postnuke V4bjournal Module
Postnuke Software Foundation
1 CVEs0 on KEV0 new
PO–
Postschedule
Postnuke Software Foundation
1 CVEs0 on KEV0 new
Recent CVEs
| CVE | Product | CVSS | Published | Summary |
|---|---|---|---|---|
| CVE-2008-2191 | PN Pnencyclopedia Postnuke Software Foundation | – | May 14 | SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a… |
| CVE-2008-2012 | PO Postschedule Postnuke Software Foundation | – | Apr 30 | SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the eid parameter in an event… |
| CVE-2007-3584 | PN Pnphpbb2 Postnuke Software Foundation | – | Jul 5 | SQL injection vulnerability in viewforum.php in PNphpBB2 1.2i and earlier for Postnuke allows remote attackers to execute arbitrary SQL commands via the order parameter |
| CVE-2007-3052 | PN Pnphpbb Postnuke Software Foundation | – | Jun 6 | SQL injection vulnerability in index.php in the PNphpBB2 1.2i and earlier module for PostNuke allows remote attackers to execute arbitrary SQL commands via the c parameter |
| CVE-2007-2492 | PV Postnuke V4bjournal Module Postnuke Software Foundation | – | May 4 | SQL injection vulnerability in index.php in the v4bJournal module for PostNuke allows remote authenticated users to execute arbitrary SQL commands via the id parameter in a… |
| CVE-2007-1158 | PA Pagesetter Postnuke Software Foundation | – | Mar 2 | Directory traversal vulnerability in index.php in the Pagesetter 6.2.0 through 6.3.0 beta 5 module for PostNuke allows remote attackers to read arbitrary files via a |
| CVE-2007-0384 | PO Postnuke Postnuke Software Foundation | – | Jan 19 | Cross-site scripting (XSS) vulnerability in preview in the reviews section in PostNuke 0.764 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors |
| CVE-2007-0386 | PO Postnuke Postnuke Software Foundation | – | Jan 19 | Unspecified vulnerability in the rating section in PostNuke 0.764 has unknown impact and attack vectors, related to "an interesting bug." |
| CVE-2007-0385 | PO Postnuke Postnuke Software Foundation | – | Jan 19 | The faq section in PostNuke 0.764 allows remote attackers to obtain sensitive information (the full path) via "unvalidated output" in FAQ/index.php, possibly involving an… |
| CVE-2006-6267 | PO Postnuke Postnuke Software Foundation | – | Dec 4 | PostNuke 0.7.5.0, and certain minor versions, allows remote attackers to obtain sensitive information via a non-numeric value of the stop parameter, which reveals the path in an… |
| CVE-2006-6233 | PO Postnuke Postnuke Software Foundation | – | Dec 2 | SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a… |
| CVE-2006-5733 | PO Postnuke Postnuke Software Foundation | – | Nov 6 | Directory traversal vulnerability in error.php in PostNuke 0.763 and earlier allows remote attackers to include and execute arbitrary local files via a |
| CVE-2006-5121 | PO Postnuke Postnuke Software Foundation | – | Oct 3 | SQL injection vulnerability in modules/Downloads/admin.php in the Admin section of PostNuke 0.762 allows remote attackers to execute arbitrary SQL commands via the hits parameter |
| CVE-2006-4968 | PN Pnphpbb Postnuke Software Foundation | – | Sep 25 | PHP remote file inclusion vulnerability in includes/functions_admin.php in PNphpBB 1.2g allows remote attackers to execute arbitrary PHP code via a URL in the phpbb_root_path… |
| CVE-2006-0800 | PO Postnuke Postnuke Software Foundation | – | Feb 20 | Interpretation conflict in PostNuke 0.761 and earlier allows remote attackers to conduct cross-site scripting (XSS) attacks via HTML tags with a trailing "<" character, which is… |
| CVE-2006-0802 | PO Postnuke Postnuke Software Foundation | – | Feb 20 | Cross-site scripting (XSS) vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is enabled, allows remote attackers to inject arbitrary… |
| CVE-2006-0801 | PO Postnuke Postnuke Software Foundation | – | Feb 20 | SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is off, allows remote attackers to execute arbitrary SQL commands via… |
| CVE-2006-0146 | PO Postnuke Postnuke Software Foundation | – | Jan 9 | The server.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle, (4) Cacti, (5) Xaraya, (6) PHPOpenChat, (7)… |
| CVE-2006-0147 | PO Postnuke Postnuke Software Foundation | – | Jan 9 | Dynamic code evaluation vulnerability in tests/tmssql.php test script in ADOdb for PHP before 4.70, as used in multiple products including (1) Mantis, (2) PostNuke, (3) Moodle,… |
| CVE-2005-2690 | PO Postnuke Postnuke Software Foundation | – | Aug 24 | SQL injection vulnerability in the Downloads module in PostNuke 0.760-RC4b allows PostNuke administrators to execute arbitrary SQL commands via the show parameter to… |
| CVE-2005-2689 | PO Postnuke Postnuke Software Foundation | – | Aug 24 | Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.760-RC4b allows remote attackers to inject arbitrary web script or HTML via (1) the moderate parameter to the… |
| CVE-2005-1778 | PO Postnuke Postnuke Software Foundation | – | May 31 | Cross-site scripting (XSS) vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to inject arbitrary web script or HTML via the start parameter |
| CVE-2005-1777 | PO Postnuke Postnuke Software Foundation | – | May 31 | SQL injection vulnerability in readpmsg.php in PostNuke 0.750 allows remote attackers to execute arbitrary SQL commands via the start parameter |
| CVE-2005-1700 | PO Postnuke Postnuke Software Foundation | – | May 24 | SQL injection vulnerability in pnadmin.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to execute arbitrary SQL commands via the riga[0] parameter |
| CVE-2005-1694 | PO Postnuke Postnuke Software Foundation | – | May 24 | Multiple SQL injection vulnerabilities in Xanthia.php in the Xanthia module in PostNuke 0.750 allow remote attackers to execute arbitrary SQL commands via the (1) name or (2)… |
| CVE-2005-1695 | PO Postnuke Postnuke Software Foundation | – | May 24 | Multiple cross-site scripting (XSS) vulnerabilities in the RSS module in PostNuke 0.750 and 0.760RC2 and RC3 allow remote attackers to inject arbitrary web script or HTML via the… |
| CVE-2005-1696 | PO Postnuke Postnuke Software Foundation | – | May 24 | Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.750 and 0.760RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) skin or (2) paletteid… |
| CVE-2005-1699 | PO Postnuke Postnuke Software Foundation | – | May 24 | Directory traversal vulnerability in pnadminapi.php in the Xanthia module in PostNuke 0.760-RC3 allows remote administrators to read arbitrary files via a |
| CVE-2005-1621 | PO Postnuke Postnuke Software Foundation | – | May 16 | Directory traversal vulnerability in the pnModFunc function in pnMod.php for PostNuke 0.750 through 0.760rc4 allows remote attackers to read arbitrary files via a |
| CVE-2005-0615 | PO Postnuke Postnuke Software Foundation | – | May 2 | Multiple SQL injection vulnerabilities in (1) index.php, (2) modules.php, or (3) admin.php in PostNuke 0.760-RC2 allow remote attackers to execute arbitrary SQL code via the catid… |
| CVE-2005-1050 | PO Postnuke Postnuke Software Foundation | – | May 2 | The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP… |
| CVE-2005-1049 | PO Postnuke Postnuke Software Foundation | – | May 2 | Multiple cross-site scripting vulnerabilities in PostNuke 0.760-RC3 allow remote attackers to inject arbitrary web script or HTML via the (1) module parameter to admin.php or (2)… |
| CVE-2005-1048 | PO Postnuke Postnuke Software Foundation | – | May 2 | SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid parameter |
| CVE-2005-0617 | PO Postnuke Postnuke Software Foundation | – | May 2 | SQL injection vulnerability in dl-search.php in PostNuke 0.750 and 0.760-RC2 allows remote attackers to execute arbitrary SQL commands via the show parameter |
| CVE-2004-1949 | PO Postnuke Postnuke Software Foundation | – | Dec 31 | SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the sif parameter to index.php in the Comments module or (2)… |
| CVE-2004-2752 | PO Postnuke Postnuke Software Foundation | – | Dec 31 | Cross-site scripting (XSS) vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web… |
| CVE-2004-2751 | PO Postnuke Postnuke Software Foundation | – | Dec 31 | SQL injection vulnerability in the members_list module in PostNuke 0.726, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the sortby parameter |
| CVE-2004-1787 | PO Postcalendar Postnuke Software Foundation | – | Dec 31 | SQL injection vulnerability in PostCalendar 4.0.0 allows remote attackers to execute arbitrary SQL commands via search queries |
| CVE-2004-1956 | PO Postnuke Postnuke Software Foundation | – | Apr 21 | PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files in the (1) includes/blocks directory, (2) pnadodb directory, (3) NS-NewUser module,… |
| CVE-2003-1537 | PO Postnuke Postnuke Software Foundation | – | Dec 31 | Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php |
| CVE-2002-1996 | PO Postnuke Postnuke Software Foundation | – | Dec 31 | Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name parameter in modules.php and… |
| CVE-2002-2015 | PO Postnuke Postnuke Software Foundation | – | Dec 31 | PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter |
| CVE-2002-0739 | PO Postcalendar Postnuke Software Foundation | – | Aug 12 | Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page |
| CVE-2002-0535 | PO Postnuke Postnuke Software Foundation | – | Jul 3 | Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in… |
| CVE-2001-1521 | PO Postnuke Postnuke Software Foundation | – | Dec 31 | Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web script or HTML via the uname parameter |
| CVE-2001-0911 | PO Postnuke Postnuke Software Foundation | – | Nov 21 | PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and… |
| CVE-2001-1460 | PO Postnuke Postnuke Software Foundation | – | Oct 13 | SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter |