| Vulnerability Name: | CVE-2006-6234 (CCN-27501) | ||||||||
| Assigned: | 2006-06-17 | ||||||||
| Published: | 2006-06-17 | ||||||||
| Updated: | 2018-10-17 | ||||||||
| Summary: | Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via (1) the cid parameter in a list_pages_categories action or (2) the pid parameter in a showpage action. | ||||||||
| CVSS v3 Severity: | 7.3 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L)
| ||||||||
| CVSS v2 Severity: | 7.5 High (CVSS v2 Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P)
| ||||||||
| Vulnerability Type: | CWE-Other | ||||||||
| Vulnerability Consequences: | Data Manipulation | ||||||||
| References: | Source: CCN Type: BugTraq Mailing List, Sat Jun 17 2006 - 03:20:18 CDT Module's Name Downloads <<--V 7 SQL injection Source: CCN Type: BugTraq Mailing List, Sat Jun 17 2006 - 03:25:40 CDT Module's Name Content<<--V1.0 SQL injection Source: CCN Type: BugTraq Mailing List, Wed Jun 28 2006 - 05:38:49 CDT PHP-Nuke Module's Name Sections<<--V3 SQL Injection Source: CCN Type: BugTraq Mailing List, Fri Jun 30 2006 - 11:37:34 CDT Module's Name "Classifieds" SQL Injection Source: CCN Type: Bug Traq Mailing List, Tue Dec 30 2008 - 08:31:59 CST php-nuke 8.0 module sections artid blind sql inj vuln. Source: MITRE Type: CNA CVE-2006-3598 Source: MITRE Type: CNA CVE-2006-3599 Source: MITRE Type: CNA CVE-2006-6233 Source: MITRE Type: CNA CVE-2006-6234 Source: MITRE Type: CNA CVE-2008-6728 Source: CCN Type: PHP-Nuke Web site PHP-Nuke Source: SREASON Type: UNKNOWN 1953 Source: VIM Type: Exploit 20061201 Old PHP-Nuke/PostNuke SQL injection issues - clarification Source: CCN Type: OSVDB ID: 33254 PostNuke Downloads Module lid Parameter SQL Injection Source: CCN Type: OSVDB ID: 35987 PHP-Nuke Content Module list_pages_categories Action cid Parameter SQL Injection Source: CCN Type: OSVDB ID: 35988 PHP-Nuke Content Module showpage Action pid Parameter SQL Injection Source: CCN Type: OSVDB ID: 37022 Nuke Advanced Classifieds module for PHP-Nuke EditAds id_ads Parameter SQL Injection Source: CCN Type: OSVDB ID: 37970 Sections Module for PHP-Nuke viewarticle Operation artid Parameter SQL Injection Source: CCN Type: OSVDB ID: 52033 Sections Module for PHP-Nuke modules.php artid Parameter SQL Injection Source: BUGTRAQ Type: UNKNOWN 20060617 Module's Name Content<<--V1.0 SQL injection Source: CCN Type: BID-18493 PHPNuke Module's Name Multiple SQL Injection Vulnerabilities Source: CCN Type: BID-27879 PHP-Nuke Sections Module 'artid' Parameter SQL Injection Vulnerability Source: XF Type: UNKNOWN phpnuke-module-sqlinjection(27501) Source: XF Type: UNKNOWN phpnuke-module-sqlinjection(27501) | ||||||||
| Vulnerable Configuration: | Configuration 1: Configuration CCN 1:  Denotes that component is vulnerable | ||||||||
| BACK | |||||||||