CVE-2007-0372

Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via (1) the active parameter in admin/modules/modules.php; the (2) ad_class, (3) imageurl, (4) clickurl, (5) ad_code, or (6) position parameter in modules/Advertising/admin/index.php; or unspecified vectors in the (7) advertising, (8) weblinks, or (9) reviews section.

• http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.htmlExploit
• http://osvdb.org/33698
• http://osvdb.org/33699
• http://osvdb.org/33700
• http://osvdb.org/33701
• http://osvdb.org/33702
• http://www.hackers.ir/advisories/festival.txtExploit
• http://www.securityfocus.com/archive/1/459174/100/0/threaded
• http://www.securityfocus.com/bid/22116Exploit, Vendor Advisory
• http://archives.neohapsis.com/archives/fulldisclosure/2007-01/0355.htmlExploit
• http://osvdb.org/33698
• http://osvdb.org/33699
• http://osvdb.org/33700
• http://osvdb.org/33701
• http://osvdb.org/33702
• http://www.hackers.ir/advisories/festival.txtExploit
• http://www.securityfocus.com/archive/1/459174/100/0/threaded
• http://www.securityfocus.com/bid/22116Exploit, Vendor Advisory

Published

Jan 19, 2007

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2007-0366Untrusted search path vulnerability in Rumpus 5.1 and earlie…
• CVE-2007-0367Rumpus 5.1 and earlier has weak permissions for certain file…
• CVE-2007-0368Stack-based buffer overflow in mbse-bbs 0.70 and earlier all…
• CVE-2007-0369SQL injection vulnerability in phpBP RC3 (2.204) and earlier…
• CVE-2007-0370Unrestricted file upload vulnerability in index.php in phpBP…
• CVE-2007-0371A certain ActiveX control in the Common Controls Replacement…
• CVE-2007-0373Multiple SQL injection vulnerabilities in Joomla! 1.5.0 Beta…
• CVE-2007-0374SQL injection vulnerability in (1) Joomla! 1.0.11 and 1.5 Be…
• CVE-2007-0375Joomla! 1.5.0 Beta allows remote attackers to obtain sensiti…
• CVE-2007-0376Cross-site scripting (XSS) vulnerability in Virtuemart 1.0.7…
• CVE-2007-0377Multiple SQL injection vulnerabilities in Xoops 2.0.16 allow…
• CVE-2007-0378Multiple SQL injection vulnerabilities in DocMan 1.3 RC2 all…