Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics[] parameter to modules.php.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Nuke Submit_News模块SQL注入漏洞
Vulnerability Description
PHP-Nuke是一套基于Web的自动化新闻发布和内容管理系统，它包含新闻主题、文件下载、论坛管理等模块。Submit_News是其中的一个新闻信息提交模块。 PHP-Nuke 8.3版本的Submit_News模块存在SQL注入漏洞，该漏洞源于modules.php脚本没有充分过滤‘topics[]’参数。远程攻击者可利用该漏洞执行任意SQL命令。
CVSS Information
N/A
Vulnerability Type
N/A