CVE-2006-1362
Last modified
CVE-2006-1362 is a vulnerability of currently unknown severity. Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter in (a) members.asp, the (2) catid parameter in (b) articles.asp and (c) programs.asp, and the (3) id parameter in (d) hpages.asp and (e) forum.asp. NOTE: The pages.asp/id vector is already covered by CVE-2006-0870.. EPSS estimates a 1.21% chance of exploitation in the next 30 days.
Description
Multiple SQL injection vulnerabilities in Mini-Nuke CMS System 1.8.2 and earlier allow remote attackers to execute arbitrary SQL commands via (1) the uid parameter in (a) members.asp, the (2) catid parameter in (b) articles.asp and (c) programs.asp, and the (3) id parameter in (d) hpages.asp and (e) forum.asp. NOTE: The pages.asp/id vector is already covered by CVE-2006-0870.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Mini-Nuke | Mini-Nuke Cms | <= 1.8.2 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2006-1362?
How severe is CVE-2006-1362?
How do I fix CVE-2006-1362?
Are you affected by CVE-2006-1362?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST
