CVE-2006-6234: SQL Injection
Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via (1) the cid parameter in a listpagescategories action or (2) the pid parameter in a showpage action.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2006-6234?
The severity of CVE-2006-6234 is considered high due to its ability to allow remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2006-6234?
To fix CVE-2006-6234, it is recommended to upgrade to a secure version of PHP-Nuke that has addressed the SQL injection vulnerabilities.
What versions are affected by CVE-2006-6234?
CVE-2006-6234 specifically affects PHP-Nuke version 6.0 and potentially other versions that have similar vulnerabilities.
What types of attacks are possible with CVE-2006-6234?
CVE-2006-6234 allows for SQL injection attacks that can compromise the database by executing arbitrary SQL commands.
Is CVE-2006-6234 still a risk for websites using PHP-Nuke?
Yes, CVE-2006-6234 remains a risk for websites using PHP-Nuke 6.0 or vulnerable versions that have not been patched.