CVE-2006-1362

Published: Mar 23, 2006Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter in (a) members.asp, the (2) catid parameter in (b) articles.asp and (c) programs.asp, and the (3) id parameter in (d) hpages.asp and (e) forum.asp. NOTE: The pages.asp/id vector is already covered by CVE-2006-0870.

Affected (1)

Products: Mini Nuke: Mini Nuke Cms

1 product

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Mini Nuke Mini Nuke Cms	Up to 1.8.2

References (8)

http://secunia.com/advisories/18439

Source: cve@mitre.org

http://securityreason.com/securityalert/617

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/428361/100/0/threaded

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/25372

Source: cve@mitre.org

http://secunia.com/advisories/18439

Source: af854a3a-2127-422b-91ae-364da2661108

http://securityreason.com/securityalert/617

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/archive/1/428361/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

https://exchange.xforce.ibmcloud.com/vulnerabilities/25372

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.