SQL Injection in NukeViet

KRITISCH 9.8CVE-2019-7726 · GHSA-q4qv-fmwc-qxpx · Published 31/12/2020 · updated 17/06/2026

Kurz gesagt

CVE-2019-7726 ist eine Schwachstelle (KRITISCH (CVSS 9.8)) in nukeviet/nukeviet, nukeviet (nukeviet).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 2.3%, höher als bei 83.4% aller Schwachstellen.
Abhilfe: auf 4.3.04 oder neuer aktualisieren.

Package	Affected versions	Patched versions
nukeviet/nukeviet Packagist	`< 4.3.04`	`4.3.04`
nukeviet nukeviet	`< 4.3.04`	`4.3.04`

Description

modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).

NVD description

modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).

References

nvd.nist.gov/vuln/detail/CVE-2019-7726 · ADVISORY
nukeviet/nukeviet#2740 · WEB
nukeviet/nukeviet · WEB
nukeviet/nukeviet · WEB
nukeviet/nukeviet · WEB

Weitere Schwachstellen in nukeviet/nukeviet

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

nukeviet/nukeviet

Packagist

< 4.3.04

4.3.04

nukeviet

< 4.3.04

4.3.04

Description

modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).

NVD description

modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).

Weitere Schwachstellen in nukeviet/nukeviet

Alle anzeigen →