CVE-2009-0302

2009-01-2720:00:00

mitre

www.cve.org

8 High

AI Score

Confidence

Low

0.005 Low

EPSS

Percentile

75.8%

JSON

SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php.

References

1337day.com/exploits/15481

osvdb.org/51633

osvdb.org/77349

www.exploit-db.com/exploits/18148

www.securityfocus.com/archive/1/500335/100/0/threaded

www.securityfocus.com/bid/33410

www.securityfocus.com/bid/50770

exchange.xforce.ibmcloud.com/vulnerabilities/48186

exchange.xforce.ibmcloud.com/vulnerabilities/71475