CVE-2006-0870

Published: Feb 23, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: version 2.3 was later reported to be vulnerable as well.

Affected (1)

Products: Mini Nuke: Mini Nuke Cms

Mini Nuke

1 product

Mini Nuke Cms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mini Nuke Mini Nuke Cms	Up to 1.8.2

References (20)

http://secunia.com/advisories/18439

Source: cve@mitre.org

ExploitVendor Advisory

http://www.nukedx.com/?viewdoc=9

Source: cve@mitre.org

Exploit

http://www.osvdb.org/23438

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/425599/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/428361/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/431602/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/431714/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/16730

Source: cve@mitre.org

Exploit

http://www.securityfocus.com/bid/17636

Source: cve@mitre.org

Exploit

https://exchange.xforce.ibmcloud.com/vulnerabilities/24803

Source: cve@mitre.org

http://secunia.com/advisories/18439