← back
CVE-2006-0870

CVE-2006-0870

EPSS 2.1%
SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: version 2.3 was later reported to be vulnerable as well.
Affected products
n/a · n/a
public PoCs found — 1
exploitdbwww.exploit-db.com/exploits/1514unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://secunia.com/advisories/18439https://exchange.xforce.ibmcloud.com/vulnerabilities/24803http://www.nukedx.com/?viewdoc=9http://www.osvdb.org/23438http://www.securityfocus.com/archive/1/425599/100/0/threadedhttp://www.securityfocus.com/archive/1/428361/100/0/threadedhttp://www.securityfocus.com/archive/1/431602/100/0/threadedhttp://www.securityfocus.com/archive/1/431714/100/0/threadedhttp://www.securityfocus.com/bid/16730http://www.securityfocus.com/bid/17636