CVE-2001-1460

SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter.

Affected products

Postnuke

Postnuke Software Foundation Postnuke

= 0.62, 0.63, 0.64

Fix

Available

CVSS 2.0

7.5 HIGH

EPSS

3.3% (87th percentile)

NVD status

Modified

Published

2005-04-21