PHP-Nuke 6.0 – ‘modules.php’ SQL Injection

漏洞ID	1053619	漏洞类型
发布时间	2002-09-25	更新时间	2002-09-25
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	PHP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/21862

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/5799/info

A SQL injection vulnerability has been discovered in PHPNuke.

Due to insufficient sanitization of variables used in SQL queries, it is possible to modify the logic of SQL queries.

This issue could result in a denial of service attack or the corruption of database information.

This issue was reported in PHPNuke version 6.0. Other versions may also be affected. 

http://www.nukesite.com/modules.php?name=News&file=article&sid=1234%20or%
201=1

相关推荐: SGI IRIX Default Coredump Umask Weakness

SGI IRIX Default Coredump Umask Weakness 漏洞ID 1101530 漏洞类型 Configuration Error 发布时间 2002-09-18 更新时间 2002-09-18 CVE编号 N/A CNNVD-ID …