Vulnerability Details CVE-2009-0302
SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.004
EPSS Ranking 57.4%
CVSS Severity
CVSS v2 Score 4.6
References
- http://1337day.com/exploits/15481
- http://osvdb.org/51633
- http://osvdb.org/77349
- http://www.exploit-db.com/exploits/18148
- http://www.securityfocus.com/archive/1/500335/100/0/threaded
- http://www.securityfocus.com/bid/33410
- http://www.securityfocus.com/bid/50770
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48186
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71475
- http://1337day.com/exploits/15481
- http://osvdb.org/51633
- http://osvdb.org/77349
- http://www.exploit-db.com/exploits/18148
- http://www.securityfocus.com/archive/1/500335/100/0/threaded
- http://www.securityfocus.com/bid/33410
- http://www.securityfocus.com/bid/50770
- https://exchange.xforce.ibmcloud.com/vulnerabilities/48186
- https://exchange.xforce.ibmcloud.com/vulnerabilities/71475
Products affected by CVE-2009-0302
-
cpe:2.3:a:php-nuke:downloads_module:8.0