Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the email or url parameters in the Add function, (2) the url parameter in the modifylinkrequestS function, (3) the orderby or min parameters in the viewlink function, (4) the orderby, min, or show parameters in the search function, or (5) the ratenum parameter in the MostPopular function.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Nuke Web_Links多个SQL注入漏洞
Vulnerability Description
PHP-Nuke 7.6的Web_Links模块中存在多个SQL注入漏洞,允许远程攻击者通过(1)Add函数的email或url参数,(2)modifylinkrequestS函数的url参数,(3)viewlink函数的orderby或min参数,(4)search函数的orderby,min或show参数或者(5)MostPopular函数的ratenum参数来执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A