vendor:
Postnuke
by:
The:Paradox
7.5
CVSS
HIGH
Blind SQL Injection
CWE
Product Name: Postnuke
Affected Version From: 0.764
Affected Version To:
Patch Exists: NO
Related CWE:
CPE:
Platforms Tested:
Postnuke <= 0.764 Blind SQL Injection Vulnerability
This exploit allows an attacker to perform blind SQL injection in Postnuke version 0.764. The vulnerability can be exploited through the benchmark method.
Mitigation:
Upgrade to a version higher than 0.764 or apply the patch if available.
