CVE-2005-1048: SQL Injection

Published Apr 12, 2005

Updated

SQL injection vulnerability in modules.php in PostNuke 0.760 RC3 allows remote attackers to execute arbitrary SQL statements via the sid parameter. NOTE: the vendor reports that they could not reproduce the issues for 760 RC3, or for .750.

Affected Software

1 affected component

Postnuke Software Foundation Postnuke=0.760_rc3

Remediation

Patch Available

http://secunia.com/advisories/14868/

Event History

Apr 12, 2005

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2005-1048?

CVE-2005-1048 is considered a high severity vulnerability due to its potential for remote SQL injection attacks.

How does CVE-2005-1048 occur?

CVE-2005-1048 occurs when the modules.php file in PostNuke 0.760 RC3 improperly handles the sid parameter, allowing attackers to execute arbitrary SQL statements.

Who is affected by CVE-2005-1048?

CVE-2005-1048 affects users of PostNuke version 0.760 RC3 that have not applied relevant security patches.

What are the potential impacts of exploiting CVE-2005-1048?

Exploiting CVE-2005-1048 may allow attackers to gain unauthorized access to the database, leading to data leakage or manipulation.

How do I fix CVE-2005-1048?

To fix CVE-2005-1048, upgrade to a later version of PostNuke that has addressed this SQL injection vulnerability.