Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
7.5
CVSSv2

CVE-2005-3792

Published: 24/11/2005 Updated: 19/10/2018
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P
Subscribe to Francisco Burzi

Vulnerability Summary

Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions prior to 7.9 with patch 3.1, allows remote malicious users to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type.

Vulnerable Product Search on Vulmon Subscribe to Product

francisco burzi php-nuke 7.6

francisco burzi php-nuke 7.7

francisco burzi php-nuke 7.8

francisco burzi php-nuke 7.2

francisco burzi php-nuke 7.3

francisco burzi php-nuke 7.0_final

francisco burzi php-nuke 7.1

Exploits

Exploit DB: PHP-Nuke 7.8 Search Module - SQL Injection
#!/usr/bin/perl -w use IO::Socket; if (@ARGV < 2) { print "*---------------------------------------*\n"; print "* EXPLOIT for PHPNuke <=78 *\n"; print "*---------------------------------------*\n\n"; print " Usage : \n"; print " PHPNuke[1] HOST /[path_phpnuke] \n\n"; print " HOST - Host where is phpnuke example: localhost \n\n"; print " Exa ...

References

NVD-CWE-Otherhttp://securityreason.com/achievement_exploitalert/5http://www.securityfocus.com/bid/15421http://secunia.com/advisories/17543/http://securitytracker.com/id?1015215http://www.osvdb.org/20866http://www.waraxe.us/advisory-46.htmlhttp://www.securityfocus.com/archive/1/425627/100/0/threadedhttp://securitytracker.com/id?1015651http://archives.neohapsis.com/archives/fulldisclosure/2005-11/0454.htmlhttp://www.vupen.com/english/advisories/2005/2446http://marc.info/?l=bugtraq&m=113210758511323&w=2https://exchange.xforce.ibmcloud.com/vulnerabilities/23079http://www.securityfocus.com/archive/1/425508/100/0/threadedhttps://nvd.nist.govhttps://www.exploit-db.com/exploits/1326/
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2023-7028memory leaklog injectionCVE-2024-3400CVE-2022-48695CVE-2022-48675CVE-2024-34487CVE-2024-33792spoof
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook