CVE-2004-2751

No fix known EPSS 1%

SQL injection vulnerability in the members_list module in PostNuke 0.726, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the sortby parameter.

Published 2007-11-14 · CVE record · OSV

Products: postnuke_software_foundation postnuke