Php-nuke is a popular web site creation and management tool that can use a lot of database software as a backend, such as MySQL, PostgreSQL, mSQL, InterBase, Sybase, and so on.
An input validation vulnerability exists on the Your_account module implementation of Php-nuke that a remote attacker could exploit to execute a SQL injection attack on the server program.
Php-nuke's Your_account module does not adequately filter the username parameters, and remote attackers may insert malicious SQL commands into this parameter, thus unauthorized access to the back-end database operation.
Affected Systems:
Php-nuke Php-nuke 7.8
Unaffected system:
Php-nuke Php-nuke 7.9 + Patch 3.1
Patch Download:
At present, the manufacturer has released the upgrade patch to fix this security issue, please go to the manufacturer's homepage to download:
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
