[email protected]CVE-2006-6200

HistoryDec 01, 2006 - 1:28 a.m.

CVE-2006-6200

2006-12-0101:28:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

cve-2006-6200

sql injection

francisco burzi

php-nuke 7.9

news module

remote code execution

nvd

9.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON

Multiple SQL injection vulnerabilities in the (1) rate_article and (2) rate_complete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the sid parameter.

CPENameOperatorVersion
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.8_patched_3.2
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.0
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.4
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.5
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.2
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.8
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.0_final
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.3
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.6
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.9

CPE	Name	Operator	Version
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.8_patched_3.2
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.0
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.4
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.5
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.2
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.8
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.0_final
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.3
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.6
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.9

Rows per page:

1-10 of 121

References

secunia.com/advisories/23128

securityreason.com/securityalert/1935

securitytracker.com/id?1017282

www.neosecurityteam.net/index.php?action=advisories&id=30

www.securityfocus.com/archive/1/452553/100/0/threaded

www.securityfocus.com/bid/21277

www.vupen.com/english/advisories/2006/4739

exchange.xforce.ibmcloud.com/vulnerabilities/30525

9.5 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.009 Low

EPSS

Percentile

82.6%

JSON