Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2006-0801

4 documents4 sources
Severity
5.1MEDIUM
EPSS
1.6%
top 18.44%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Postnuke Software Foundation Postnuke
Timeline
PublishedFeb 20
Latest updateMay 1

Description

SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is off, allows remote attackers to execute arbitrary SQL commands via the language parameter to admin.php.

CVSS vector

AV:N/AC:H/C:P/I:P/A:PExploitability: 4.9 | Impact: 6.4

Affected Packages1 packages

Patches

Patch: secunia.com ↗Patch: www.securityfocus.com ↗Patch: secunia.com ↗

🔴Vulnerability Details

2
GHSA
GHSA-cm2q-8g3g-h93g: SQL injection vulnerability in the NS-Languages module for PostNuke 0↗2022-05-01
▶
CVEList
CVE-2006-0801: SQL injection vulnerability in the NS-Languages module for PostNuke 0↗2006-02-20
▶

💥Exploits & PoCs

1
Exploit-DB
PostNuke 0.6x/0.7x NS-Languages Module - 'language' SQL Injection↗2006-02-21
▶