CVE-2004-2751: Postnuke Software Foundation Postnuke

Medium severity, CVSS 6.8. EPSS: 1.4% chance of exploitation in the next 30 days.

SQL injection vulnerability in the members_list module in PostNuke 0.726, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the sortby parameter.

Affected products

• Postnuke Software Foundation Postnuke: version 0.722 only; version 0.723 only; version 0.726 only

Published 2004-12-31. Last modified 2026-06-16.