CVE-2006-0679

ALTO 7.5CVE-2006-0679 · Published 16/02/2006 · updated 16/06/2026

In breve

CVE-2006-0679 è una vulnerabilità ALTO (CVSS 7.5) che riguarda php-nuke ev (francisco burzi).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.7%, superiore al 89.6% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
php-nuke ev francisco_burzi	`= 7.8`	No fix yet

Description

SQL injection vulnerability in index.php in the Your_Account module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL commands via the username variable (Nickname field).

References

archives.neohapsis.com/archives/fulldisclosure/2006-02/0358.html · Exploit
secunia.com/advisories/18931
securityreason.com/achievement_securityalert/32 · Exploit
securityreason.com/securityalert/440
osvdb.org/23259
securityfocus.com/archive/1/425173/100/0/threaded
securityfocus.com/bid/16691
vupen.com/english/advisories/2006/0636
exchange.xforce.ibmcloud.com/vulnerabilities/24769

Altre vulnerabilità di php-nuke ev

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free