CVE-2005-3792: SQL Injection
Published Nov 24, 2005
·Updated
Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type.
Affected Software
7 affected components
Francisco Burzi PHP-Nuke=7.0_final
Francisco Burzi PHP-Nuke=7.1
Francisco Burzi PHP-Nuke=7.2
Francisco Burzi PHP-Nuke=7.3
Francisco Burzi PHP-Nuke=7.6
Francisco Burzi PHP-Nuke=7.7
Francisco Burzi PHP-Nuke=7.8
Event History
Nov 24, 2005
CVE Published
11:03 AM
CVE Published
via MITRE·04:00 PM
Data Sourced
via MITRE·04:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-3792?
CVE-2005-3792 is considered high severity due to its potential for remote SQL injection attacks.
2
How do I fix CVE-2005-3792?
To fix CVE-2005-3792, upgrade your PHP-Nuke installation to version 7.9 or later with the appropriate patch.
3
What are the affected versions in CVE-2005-3792?
CVE-2005-3792 affects PHP-Nuke versions 7.0_final to 7.8, including all versions before 7.9 if not patched.
4
Can CVE-2005-3792 be exploited remotely?
Yes, attackers can exploit CVE-2005-3792 remotely through crafted SQL queries.
5
What types of vulnerabilities does CVE-2005-3792 represent?
CVE-2005-3792 represents SQL injection vulnerabilities that can lead to arbitrary SQL command execution.