PT-2005-5380 · Php · Php-Nuke

Onkel_Fisch + 1 · Published 2005-12-31 · Updated 2017-07-20 · CVE-2005-4715

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP-Nuke version 7.8

Description The issue allows remote attackers to execute arbitrary SQL commands due to multiple SQL injection vulnerabilities in the modules.php file when magic quotes gpc is disabled. This is achieved by exploiting the name, sid, and pid parameters in a POST request, which bypasses the security checks performed for GET requests.

Recommendations For PHP-Nuke version 7.8, consider disabling the modules.php file or restricting access to it until a patch is available. As a temporary workaround, enable magic quotes gpc to prevent SQL injection attacks via the name, sid, and pid parameters in POST requests. Restrict input for these parameters to minimize the risk of exploitation.

Exploit

Fix

Related Identifiers

CVE-2005-4715

Affected Products

Php-Nuke

References · 12

• 🔥 http://archives.neohapsis.com/archives/bugtraq/2005-09/0119.html · Exploit
• http://secunia.com/advisories/16801 · Vendor Advisory
• http://nukefixes.com/ftopict-1779-.html#7641 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2005-4715 · Security Note
• http://phpnuke.org/modules.php?name=News&file=article&sid=7434 · Patch
• http://archives.neohapsis.com/archives/bugtraq/2005-09/0167.html · Note
• http://archives.neohapsis.com/archives/bugtraq/2005-09/0176.html · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/22247 · Note
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2005-4715 · Note
• http://securityreason.com/securityalert/3 · Note
• http://osvdb.org/19351 · Note
• http://archives.neohapsis.com/archives/bugtraq/2005-09/0226.html · Note