CVE-2011-1480
N/A
N/A
Summary
SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the chng_uid parameter.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://www.openwall.com/lists/oss-security/2011/03/23/7
- http://www.openwall.com/lists/oss-security/2011/03/30/6
- http://yehg.net/lab/pr0js/advisories/%5Bphpnuke-8.x%5D_sql_injection
References
- http://www.openwall.com/lists/oss-security/2011/03/23/7
- http://www.openwall.com/lists/oss-security/2011/03/30/6
- http://yehg.net/lab/pr0js/advisories/%5Bphpnuke-8.x%5D_sql_injection
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.