CVE-2006-6233: Postnuke Software Foundation Postnuke

High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days.

SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in dl-downloaddetails.php, but PostNuke 0.764 does not appear to have this issue.

Affected products

• Postnuke Software Foundation Postnuke: version 0.76_rc4 only; version 0.76_rc4a only; version 0.76_rc4b only; version 0.760_rc2 only; version 0.760_rc3 only; version 0.760_rc4 only; …

Published 2006-12-02. Last modified 2026-06-16.