CVE-2009-1842

概要

参考情報

• gsasec.blogspot.com/2009/05/php-nuke-v80-referer-sql-injection.html · Exploit
• securityfocus.com/bid/35117 · Exploit
• exchange.xforce.ibmcloud.com/vulnerabilities/50818

php-nuke のその他の脆弱性

• CVE-2021-30177緊急 9.8There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution. This occurs bec…
• CVE-2014-3934高 7.5SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the top…
• CVE-2010-5083高 7.5SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url p…
• CVE-2011-3784中 5.0Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the …
• CVE-2011-1482中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attacker…