Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) sid, and (3) pid parameters in a POST request, which bypasses security checks that are performed for GET requests.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Nuke modules.php 多个SQL注入漏洞
Vulnerability Description
PHP-Nuke 7.8中的modules.php存在多个SQL注入漏洞,当禁用了magic_quotes_gpc时,远程攻击者可以通过在POST请求中的(1)名字,(2) sid和(3)pid参数来执行任意SQL命令。这种请求绕过了为GET请求而执行的安全检查。
CVSS Information
N/A
Vulnerability Type
N/A