CVE Vulnerabilities

CVE-2006-6200

Published: Dec 01, 2006 | Modified: Oct 17, 2018
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
7.5 HIGH
AV:N/AC:L/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu

Multiple SQL injection vulnerabilities in the (1) rate_article and (2) rate_complete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the sid parameter.

Affected Software

Name Vendor Start Version End Version
Php-nuke Francisco_burzi 7.8_patched_3.2 7.8_patched_3.2
Php-nuke Francisco_burzi 7.0 7.0
Php-nuke Francisco_burzi 7.4 7.4
Php-nuke Francisco_burzi 7.5 7.5
Php-nuke Francisco_burzi 7.2 7.2
Php-nuke Francisco_burzi 7.8 7.8
Php-nuke Francisco_burzi 7.0_final 7.0_final
Php-nuke Francisco_burzi 7.3 7.3
Php-nuke Francisco_burzi 7.6 7.6
Php-nuke Francisco_burzi 7.9 7.9
Php-nuke Francisco_burzi 7.7 7.7
Php-nuke Francisco_burzi 7.1 7.1

References