Lucene search

[email protected]CVE-2007-1450

HistoryMar 14, 2007 - 6:19 p.m.

CVE-2007-1450

2007-03-1418:19:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

sql injection

php-nuke

vulnerability

remote execution

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

53.1%

JSON

SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter.

CPENameOperatorVersion
phpnuke:php-nukephpnuke php-nukeeq7.3
phpnuke:php-nukephpnuke php-nukeeq7.4
phpnuke:php-nukephpnuke php-nukeeq7.1
phpnuke:php-nukephpnuke php-nukeeq7.9
phpnuke:php-nukephpnuke php-nukeeq8.0.0
phpnuke:php-nukephpnuke php-nukeeq7.5
phpnuke:php-nukephpnuke php-nukeeq7.2
phpnuke:php-nukephpnuke php-nukeeq7.7
phpnuke:php-nukephpnuke php-nukeeq7.8
phpnuke:php-nukephpnuke php-nukeeq7.0

CPE	Name	Operator	Version
phpnuke:php-nuke	phpnuke php-nuke	eq	7.3
phpnuke:php-nuke	phpnuke php-nuke	eq	7.4
phpnuke:php-nuke	phpnuke php-nuke	eq	7.1
phpnuke:php-nuke	phpnuke php-nuke	eq	7.9
phpnuke:php-nuke	phpnuke php-nuke	eq	8.0.0
phpnuke:php-nuke	phpnuke php-nuke	eq	7.5
phpnuke:php-nuke	phpnuke php-nuke	eq	7.2
phpnuke:php-nuke	phpnuke php-nuke	eq	7.7
phpnuke:php-nuke	phpnuke php-nuke	eq	7.8
phpnuke:php-nuke	phpnuke php-nuke	eq	7.0

Rows per page:

1-10 of 111

References

www.securityfocus.com/archive/1/462443/100/0/threaded

www.securityfocus.com/bid/22909

8.7 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

53.1%

JSON

Related for CVE-2007-1450

prion1 securityvulns1