Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search module.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Nuke modules.php远程可获取加密后口令漏洞
Vulnerability Description
PHP-Nuke是一个广为流行的网站创建和管理工具,它可以使用很多数据库软件作为后端,比如MySQL、PostgreSQL、mSQL、Interbase、Sybase等。 PHP-Nuke 5.6和6.0版本中的modules.php脚本存在SQL指令注入漏洞,远程攻击者可能利用此漏洞获取PHP-Nuke管理员的加密后的口令HASH值,从而获取管理员权限。
CVSS Information
N/A
Vulnerability Type
N/A