CVE-2004-2751: SQL Injection
Published Dec 31, 2004
·Updated
SQL injection vulnerability in the memberslist module in PostNuke 0.726, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the sortby parameter.
Affected Software
3 affected components
Postnuke Software Foundation Postnuke=0.726
Postnuke Software Foundation Postnuke=0.722
Postnuke Software Foundation Postnuke=0.723
Remediation
Patch Available
Event History
Dec 31, 2004
CVE Published
05:00 AM
Nov 14, 2007
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2751?
CVE-2004-2751 is classified as a medium severity vulnerability due to the potential for SQL injection attacks.
2
How do I fix CVE-2004-2751?
To fix CVE-2004-2751, update PostNuke to version 0.727 or later, which addresses this vulnerability.
3
What software versions are affected by CVE-2004-2751?
CVE-2004-2751 affects PostNuke versions 0.726, 0.725, and possibly earlier versions.
4
Can CVE-2004-2751 be exploited remotely?
Yes, CVE-2004-2751 can be exploited remotely by attackers to execute arbitrary SQL commands.
5
What types of attacks can be performed using CVE-2004-2751?
Exploiting CVE-2004-2751 allows attackers to manipulate database queries and potentially gain unauthorized access to sensitive data.