CVE-2006-6233

no score yetEPSS 1.2%

SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in dl-downloaddetails.php, but PostNuke 0.764 does not appear to have this issue.

EPSS: 1.2% chance of exploitation in the next 30 days; higher than 67% of CVEs (scores of 2026-10-31)
Published: 2006-12-02
Modified: 2026-06-16
Record from: the NVD, synced 2026-10-19

Affected

postnuke_software_foundation:postnuke

References

http://securityreason.com/securityalert/1952
http://www.securityfocus.com/archive/1/437832/100/200/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/27501
http://securityreason.com/securityalert/1952
http://www.securityfocus.com/archive/1/437832/100/200/threaded

Check your stack JSON