CVE-2006-1362

HIGH 7.5CVE-2006-1362 · Published 23/03/2006 · updated 16/06/2026

In short

CVE-2006-1362 is a HIGH (CVSS 7.5) vulnerability affecting mini-nuke cms (mini-nuke).
Chance of exploitation in the next 30 days (EPSS): 1.2%, higher than 68.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
mini-nuke cms mini-nuke	`≤ 1.8.2`	No fix yet

Description

Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter in (a) members.asp, the (2) catid parameter in (b) articles.asp and (c) programs.asp, and the (3) id parameter in (d) hpages.asp and (e) forum.asp. NOTE: The pages.asp/id vector is already covered by CVE-2006-0870.

References

More vulnerabilities in mini-nuke cms

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free