CVE-2006-5720: SQL Injection
Published Nov 4, 2006
·Updated
SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.9 and earlier allows remote attackers to execute arbitrary SQL commands via the forwhat parameter.
Affected Software
10 affected components
Francisco Burzi PHP-Nuke=7.0
Francisco Burzi PHP-Nuke=7.4
Francisco Burzi PHP-Nuke=7.5
Francisco Burzi PHP-Nuke=7.2
Francisco Burzi PHP-Nuke=7.8
Francisco Burzi PHP-Nuke=7.3
Francisco Burzi PHP-Nuke=7.6
Francisco Burzi PHP-Nuke=7.7
Francisco Burzi PHP-Nuke<=7.9
Francisco Burzi PHP-Nuke=7.1
Event History
Nov 4, 2006
CVE Published
01:07 AM
Data Sourced
via NVD·01:07 AM
DescriptionSeverityAffected Software
CVE Published
via MITRE·06:00 AM
Data Sourced
via MITRE·06:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2006-5720?
CVE-2006-5720 is classified as a medium severity SQL injection vulnerability.
2
How do I fix CVE-2006-5720?
To fix CVE-2006-5720, update PHP-Nuke to version 7.9 or later.
3
What types of attacks can be executed through CVE-2006-5720?
CVE-2006-5720 allows attackers to execute arbitrary SQL commands on the affected systems.
4
Which versions of PHP-Nuke are affected by CVE-2006-5720?
PHP-Nuke versions 7.9 and earlier are affected by CVE-2006-5720.
5
Is CVE-2006-5720 present in PHP-Nuke 8.0 and later?
CVE-2006-5720 is not present in PHP-Nuke versions 8.0 and later as they are not affected.