CVE-2007-1450

Published: Mar 14, 2007Modified: Apr 23, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter.

Affected (11)

Products: Phpnuke: Php Nuke

Phpnuke

1 product

Php Nuke

Configuration A

11 vulnerable

Vulnerable Software	Affected Versions
Phpnuke Php Nuke	Version 7.0
Phpnuke Php Nuke	Version 7.1
Phpnuke Php Nuke	Version 7.2
Phpnuke Php Nuke	Version 7.3
Phpnuke Php Nuke	Version 7.4
Phpnuke Php Nuke	Version 7.5
Phpnuke Php Nuke	Version 7.6
Phpnuke Php Nuke	Version 7.7
Phpnuke Php Nuke	Version 7.8
Phpnuke Php Nuke	Version 7.9
Phpnuke Php Nuke	Version 8.0.0 final

References (4)

http://www.securityfocus.com/archive/1/462443/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/22909

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/462443/100/0/threaded

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/22909

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.