FreshPorts - VuXML

A cross-site scripting vulnerability is present in the PostNuke PHP content management system. By passing data injected through exploitable errors in input validation, an attacker can insert code which will run on the machine of anybody viewing the page. It is feasible that this attack could be used to retrieve session information from cookies, thereby allowing the attacker to gain administrative access to the CMS.

< 0.760

Two separate SQL injection vulnerabilities have been identified in the PostNuke PHP content management system. An attacker can use this vulnerability to potentially insert executable PHP code into the content management system (to view all files within the PHP scope, for instance). Various other SQL injection vulnerabilities exist, which give attackers the ability to run SQL queries on any tables within the database.

< 0.760

ISS X-Force reports:

PostNuke is vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to the admin section using the hits parameter, which could allow the attacker to view, add, modify or delete information in the back-end database.

< 0.763

Postnuke Security Announcementss reports of the following vulnerabilities:

• missing input validation within /modules/Messages/readpmsg.php
• possible path disclosure within /user.php
• possible path disclosure within /modules/News/article.php
• possible remote code injection within /includes/pnMod.php
• possible cross-site-scripting in /index.php

• remote code injection via xml rpc library

< 0.760