EDB-4965

functional

PHP-Nuke 8.0 Final - 'sid' SQL Injection

view exploit source exploit_dbverifiedtype webappsauthor RST/GHCpublished 2008-01-22catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2008-0461USmedium6.8Exploit
SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL…
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan