Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Nuke 下载模块SQL注入漏洞
Vulnerability Description
PHP-Nuke下载模块8.0版本存在SQL注入漏洞。当register_globals被激活而magic_quotes_gpc被中止时,远程认证用户可以借助对modules.php的添加操作中的URL参数,执行任意的SQL指令。
CVSS Information
N/A
Vulnerability Type
N/A