CVE:CVE-2004-2751
CNNVD:CNNVD-200412-849
PostNuke 0.726及其可能早期的版本的members_list模块存在SQL注入漏洞。远程攻击者可以借助sortby参数执行任意SQL命令。
solution:Upgrade postnuke_software_foundation postnuke to a higher version than 0.722,0.723,0.726,and avoid the version 0.722,0.723,0.726