CVE-2006-0801

SQL injection vulnerability in the NS-Languages module for PostNuke 0.761 and earlier, when magic_quotes_gpc is off, allows remote attackers to execute arbitrary SQL commands via the language parameter to admin.php.

Affected products

Postnuke

Postnuke Software Foundation Postnuke

≤ 0.761

Fix

Available

CVSS 2.0

5.1 MEDIUM

EPSS

1.2% (65th percentile)

NVD status

Modified

Published

2006-02-20