CVE-2011-1480

Published: Jun 21, 2011Modified: Apr 29, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the chng_uid parameter.

Affected (26)

Products: Phpnuke: Php Nuke

Phpnuke

1 product

Php Nuke

Configuration A

26 vulnerable

Vulnerable Software	Affected Versions
Phpnuke Php Nuke	Up to 8.0
Phpnuke Php Nuke	Version 5.0.1
Phpnuke Php Nuke	Version 5.0
Phpnuke Php Nuke	Version 5.1
Phpnuke Php Nuke	Version 5.2
Phpnuke Php Nuke	Version 5.3.1
Phpnuke Php Nuke	Version 5.3
Phpnuke Php Nuke	Version 5.4
Phpnuke Php Nuke	Version 5.5
Phpnuke Php Nuke	Version 5.6
Phpnuke Php Nuke	Version 6.0
Phpnuke Php Nuke	Version 6.5
Phpnuke Php Nuke	Version 6.6
Phpnuke Php Nuke	Version 6.7
Phpnuke Php Nuke	Version 6.8
Phpnuke Php Nuke	Version 6.9
Phpnuke Php Nuke	Version 7.0
Phpnuke Php Nuke	Version 7.1
Phpnuke Php Nuke	Version 7.2
Phpnuke Php Nuke	Version 7.3
Phpnuke Php Nuke	Version 7.4
Phpnuke Php Nuke	Version 7.5
Phpnuke Php Nuke	Version 7.6
Phpnuke Php Nuke	Version 7.7
Phpnuke Php Nuke	Version 7.8
Phpnuke Php Nuke	Version 7.9