PHPNuke Search Module SQL Injection Vulnerability
2015年7月21日
危険度: 高
CVE識別番号: CVE-2005-3792
情報公開日: 7 21, 2015
概要
Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type.
トレンドマイクロの対策
Apply associated Trend Micro DPI Rules.
影響を受けるソフトウェア
- Francisco Burzi PHP-Nuke 7.0 FINAL
- Francisco Burzi PHP-Nuke 7.1
- Francisco Burzi PHP-Nuke 7.2
- Francisco Burzi PHP-Nuke 7.3
- Francisco Burzi PHP-Nuke 7.6
- Francisco Burzi PHP-Nuke 7.7
- Francisco Burzi PHP-Nuke 7.8