PostNuke Phoenix is reported prone to an SQL injection vulnerability. This issue arises due to insufficient sanitization of user-supplied input. It is reported that issue presents itself when malicious SQL syntax is issued to the application through the 'show' variable. PostNuke 0.760-RC2 and prior versions are reported vulnerable.
PostNuke Phoenix is reported prone to an SQL injection vulnerability. This issue arises due to insufficient sanitization of user-supplied input. It is reported that issue presents itself when malicious SQL syntax is issued to the application through the 'show' variable. PostNuke 0.760-RC2 and prior versions are reported vulnerable.