CVE-2011-1480: SQL Injection
Published Jun 21, 2011
·Updated
SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the chnguid parameter.
Affected Software
26 affected components
Phpnuke Php-nuke<=8.0
Phpnuke Php-nuke=5.0
Phpnuke Php-nuke=5.0.1
Phpnuke Php-nuke=5.1
Phpnuke Php-nuke=5.2
Phpnuke Php-nuke=5.3
Phpnuke Php-nuke=5.3.1
Phpnuke Php-nuke=5.4
Phpnuke Php-nuke=5.5
Phpnuke Php-nuke=5.6
Phpnuke Php-nuke=6.0
Phpnuke Php-nuke=6.5
Phpnuke Php-nuke=6.6
Phpnuke Php-nuke=6.7
Phpnuke Php-nuke=6.8
Phpnuke Php-nuke=6.9
Phpnuke Php-nuke=7.0
Phpnuke Php-nuke=7.1
Phpnuke Php-nuke=7.2
Phpnuke Php-nuke=7.3
Phpnuke Php-nuke=7.4
Phpnuke Php-nuke=7.5
Phpnuke Php-nuke=7.6
Phpnuke Php-nuke=7.7
Phpnuke Php-nuke=7.8
Phpnuke Php-nuke=7.9
Event History
Jun 21, 2011
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2011-1480?
CVE-2011-1480 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2011-1480?
To fix CVE-2011-1480, upgrade to PHP-Nuke version 8.1 or later where the issue is resolved.
3
What types of attacks can be launched using CVE-2011-1480?
Attackers can execute arbitrary SQL commands to manipulate the backend database, leading to data leakage or corruption.
4
Which versions of PHP-Nuke are affected by CVE-2011-1480?
CVE-2011-1480 affects PHP-Nuke versions 8.0 and earlier.
5
What is the impact of exploiting CVE-2011-1480?
Exploitation of CVE-2011-1480 can result in unauthorized access to sensitive data and potential complete database compromise.