CVE-2009-1842

Description

References

• gsasec.blogspot.com/2009/05/php-nuke-v80-referer-sql-injection.html · Exploit
• securityfocus.com/bid/35117 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/50818

Weitere Schwachstellen in php-nuke

• CVE-2021-30177KRITISCH 9.8There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution. This occurs bec…
• CVE-2014-3934HOCH 7.5SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the top…
• CVE-2010-5083HOCH 7.5SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url p…
• CVE-2011-3784MITTEL 5.0Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the …
• CVE-2011-1482MITTEL 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attacker…