Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) sid, and (3) pid parameters in a POST request, which bypasses security checks that are performed for GET requests.
| Type | CWE ID | Description |
|---|---|---|
| text | N/A | n/a |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2005-09/0226.html | mailing-list x_refsource_BUGTRAQ |
| http://secunia.com/advisories/16801 | third-party-advisory x_refsource_SECUNIA |
| http://securityreason.com/securityalert/3 | third-party-advisory x_refsource_SREASON |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/22247 | vdb-entry x_refsource_XF |
| http://www.nukefixes.com/ftopict-1779-.html#7641 | x_refsource_CONFIRM |
| http://phpnuke.org/modules.php?name=News&file=article&sid=7434 | x_refsource_CONFIRM |
| http://www.osvdb.org/19351 | vdb-entry x_refsource_OSVDB |
| http://archives.neohapsis.com/archives/bugtraq/2005-09/0176.html | mailing-list x_refsource_BUGTRAQ |
| http://archives.neohapsis.com/archives/bugtraq/2005-09/0119.html | mailing-list x_refsource_BUGTRAQ |
| http://archives.neohapsis.com/archives/bugtraq/2005-09/0167.html | mailing-list x_refsource_BUGTRAQ |
| Version | Base score | Base severity | Vector |
|---|
| CAPEC ID | Description |
|---|
| Event | Date |
|---|
| Hyperlink | Resource |
|---|---|
| http://archives.neohapsis.com/archives/bugtraq/2005-09/0226.html | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://secunia.com/advisories/16801 | third-party-advisory x_refsource_SECUNIA x_transferred |
| http://securityreason.com/securityalert/3 | third-party-advisory x_refsource_SREASON x_transferred |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/22247 | vdb-entry x_refsource_XF x_transferred |
| http://www.nukefixes.com/ftopict-1779-.html#7641 | x_refsource_CONFIRM x_transferred |
| http://phpnuke.org/modules.php?name=News&file=article&sid=7434 | x_refsource_CONFIRM x_transferred |
| http://www.osvdb.org/19351 | vdb-entry x_refsource_OSVDB x_transferred |
| http://archives.neohapsis.com/archives/bugtraq/2005-09/0176.html | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://archives.neohapsis.com/archives/bugtraq/2005-09/0119.html | mailing-list x_refsource_BUGTRAQ x_transferred |
| http://archives.neohapsis.com/archives/bugtraq/2005-09/0167.html | mailing-list x_refsource_BUGTRAQ x_transferred |