CVE-2014-3934

概要

参考情報

• packetstormsecurity.com/files/126803/phpnuke83news-sql.txt · Exploit
• securityfocus.com/bid/67656 · Exploit

php-nuke のその他の脆弱性

• CVE-2021-30177緊急 9.8There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution. This occurs bec…
• CVE-2010-5083高 7.5SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url p…
• CVE-2011-3784中 5.0Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the …
• CVE-2011-1482中 6.8Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attacker…
• CVE-2011-1481中 4.3Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary w…