SQL Injection in NukeViet

CRÍTICO 9.8CVE-2019-7726 · GHSA-q4qv-fmwc-qxpx · Published 31/12/2020 · updated 17/06/2026

Em resumo

CVE-2019-7726 é uma vulnerabilidade CRÍTICO (CVSS 9.8) que afeta nukeviet/nukeviet, nukeviet (nukeviet).
Chance de exploração nos próximos 30 dias (EPSS): 2.3%, maior que 83.4% das vulnerabilidades.
Correção: atualize para 4.3.04 ou posterior.

Package	Affected versions	Patched versions
nukeviet/nukeviet Packagist	`< 4.3.04`	`4.3.04`
nukeviet nukeviet	`< 4.3.04`	`4.3.04`

Description

modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).

NVD description

modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).

References

nvd.nist.gov/vuln/detail/CVE-2019-7726 · ADVISORY
nukeviet/nukeviet#2740 · WEB
nukeviet/nukeviet · WEB
nukeviet/nukeviet · WEB
nukeviet/nukeviet · WEB

Mais vulnerabilidades de nukeviet/nukeviet

Ver tudo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

nukeviet/nukeviet

Packagist

< 4.3.04

4.3.04

nukeviet

< 4.3.04

4.3.04

Description

modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).

NVD description

modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).

Mais vulnerabilidades de nukeviet/nukeviet

Ver tudo →