CVE-2004-1949
SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via (1) the sif parameter to index.php in the Comments module or (2) timezoneoffset parameter to changeinfo.php in the Your_Account module.
- Affected products
- Postnuke
- Postnuke Software Foundation Postnuke
- = 0.726
- Fix
- Available
- CVSS 2.0
- 7.5 HIGH
- EPSS
- 2.0% (78th percentile)
- NVD status
- Modified
- Published
- 2005-05-10
CVE-2004-1949 at NVD
No indexed exploits for CVE-2004-1949 yet
Our index is partial: it proves presence, never absence
No exploit for CVE-2004-1949 has been indexed yet. Our index is built from live traffic and upstream syncs, so this page can only say what it knows — not that no exploit exists.