Description
SQL injection vulnerability in modules/Downloads/admin.php in the Admin section of PostNuke 0.762 allows remote attackers to execute arbitrary SQL commands via the hits parameter.
References
- postnuke-admin-sql-injection(29271) vdb-entry
- 1669 third-party-advisory
- http://community.postnuke.com/index.php?name=News&file=article&sid=2783
- 22197 third-party-advisory
- 20317 vdb-entry
- 20060929 Sql injection in PostNuke [Admin section] mailing-list
- ADV-2006-3886 vdb-entry