← Back

CVE-2006-6200

nvd nist
Published: Dec 1, 2006Modified: Apr 23, 2026

JSON object

Loading...
7.5
Vector
AV:N/AC:L/Au:N/C:P/I:P/A:P
Exploitability: 10.0 / Impact: 6.4
Source: NVD

Description

Multiple SQL injection vulnerabilities in the (1) rate_article and (2) rate_complete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the sid parameter.

Affected (12)

Francisco Burzi
1 product
Php Nuke
Configuration A
12 vulnerable
Vulnerable SoftwareAffected Versions
Francisco Burzi
Php Nuke
Version 7.0
Php Nuke
Version 7.0_final
Php Nuke
Version 7.1
Php Nuke
Version 7.2
Php Nuke
Version 7.3
Php Nuke
Version 7.4
Php Nuke
Version 7.5
Php Nuke
Version 7.6
Php Nuke
Version 7.7
Php Nuke
Version 7.8
Php Nuke
Version 7.8_patched_3.2
Php Nuke
Version 7.9

References (16)

Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Vendor Advisory
Source: cve@mitre.org
Patch
Source: cve@mitre.org
Source: cve@mitre.org
ExploitPatchVendor Advisory
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Vendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Patch
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitPatchVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.