CVE-2009-1842

HIGH 7.5CVE-2009-1842 · Published 01/06/2009 · updated 16/06/2026

In short

CVE-2009-1842 is a HIGH (CVSS 7.5) vulnerability affecting php-nuke (phpnuke).
Chance of exploitation in the next 30 days (EPSS): 0.96%, higher than 61.6% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
php-nuke phpnuke	`= 8.0`	No fix yet

Description

SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.

References

gsasec.blogspot.com/2009/05/php-nuke-v80-referer-sql-injection.html · Exploit
securityfocus.com/bid/35117 · Exploit
exchange.xforce.ibmcloud.com/vulnerabilities/50818

More vulnerabilities in php-nuke

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free