CVE-2007-1034

EPSS 1.5%

SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category_id parameter.

Affected products

n/a · n/a

public PoCs found — 2

exploitdbwww.exploit-db.com/exploits/10615unverified cve_referencewww.exploit-db.com/exploits/3334unverified

⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →

References

http://osvdb.org/35981 https://exchange.xforce.ibmcloud.com/vulnerabilities/23699 https://www.exploit-db.com/exploits/3334 http://www.securityfocus.com/bid/22612 http://www.vupen.com/english/advisories/2007/0661