PHP-Nuke multiple modules SQL injection
| phpnuke-module-sqlinjection (27501) |  Medium Risk |
Description:
Multiple PHP-Nuke module's names are vulnerable to SQL injection. A remote attacker could send specially-crafted SQL statements to modules.php?name=Content, modules.php?name=Downloads, modules.php?name=Sections, or modules.php?name=Classifieds using the 'id_ads', 'lid', 'cid', 'artid' or the 'pid' parameter, which could allow the attacker to view, add, modify, or delete information in the back-end database.
Consequences:
Data Manipulation
Remedy:
No remedy available as of July 9, 2011.
References:
- Bug Traq Mailing List, Tue Dec 30 2008 - 08:31:59 CST: php-nuke 8.0 module sections artid blind sql inj vuln..
- BugTraq Mailing List, Fri Jun 30 2006 - 11:37:34 CDT: Module's Name "Classifieds" SQL Injection.
- BugTraq Mailing List, Sat Jun 17 2006 - 03:20:18 CDT: Module's Name Downloads <<--V 7 SQL injection.
- BugTraq Mailing List, Sat Jun 17 2006 - 03:25:40 CDT: Module's Name Content<<--V1.0 SQL injection.
- BugTraq Mailing List, Wed Jun 28 2006 - 05:38:49 CDT: PHP-Nuke Module's Name Sections<<--V3 SQL Injection.
- PHP-Nuke Web site: PHP-Nuke.
- BID-18493: PHPNuke Module's Name Multiple SQL Injection Vulnerabilities
- BID-27879: PHP-Nuke Sections Module 'artid' Parameter SQL Injection Vulnerability
- CVE-2006-3598: SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle op.
- CVE-2006-3599: SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_ads parameter in an EditAds op.
- CVE-2006-6233: SQL injection vulnerability in the Downloads module for unknown versions of PostNuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a viewdownloaddetails operation. NOTE: this issue might have been in the viewdownloaddetails function in dl-downloaddetails.php, but PostNuke 0.764 does not appear to have this issue.
- CVE-2006-6234: Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via (1) the cid parameter in a list_pages_categories action or (2) the pid parameter in a showpage action.
- CVE-2008-6728: SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php.
Platforms Affected:
- PHPNuke PHP-Nuke
Reported:
Jun 17, 2006
The information within this database may change without notice. Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. In no event shall the author/distributor (IBM Internet Security Systems X-Force) be held liable for any damages whatsoever arising out of or in connection with the use or spread of this information.
For corrections or additions please email xforce@iss.net