GCVE-110-CERTCC-2001-921547

Advisory Published

Vulnetix · Advisory published October 13, 2001

PostNuke does not adequately filter user input, allowing arbitrary MySQL query execution and user authentication without password.

Download JSON Open in Console

Risk Scores

certcc-cam

impact11population4exploitation0widely_known15score_current4.7025ease_of_exploitation15

References

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

url

PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection

advisory

Browse GCVE Records

73,196 records in the GCVE database · Updated July 17, 2026

No matching records found.

Explore Further

Investigate this vulnerability in the interactive console or download the raw GCVE record.

Open in Console Download JSON