PHP-Nuke Search Module 'sid' Parameter SQL Injection Vulnerability

Bugtraq ID:	27408
Class:	Input Validation Error
CVE:	CVE-2008-0461
Remote:	Yes
Local:	No
Published:	Jan 22 2008 12:00AM
Updated:	May 07 2015 05:33PM
Credit:	Foster & 1dt.w0lf are credited with the discovery of this vulnerability.
Vulnerable:	Francisco Burzi PHP-Nuke 7.9 Francisco Burzi PHP-Nuke 7.8 Francisco Burzi PHP-Nuke 7.7 Francisco Burzi PHP-Nuke 7.6 Francisco Burzi PHP-Nuke 7.3 Francisco Burzi PHP-Nuke 7.2 Francisco Burzi PHP-Nuke 7.1 Francisco Burzi PHP-Nuke 7.0 FINAL Francisco Burzi PHP-Nuke 7.0 Francisco Burzi PHP-Nuke 6.9 Francisco Burzi PHP-Nuke 6.7 Francisco Burzi PHP-Nuke 6.6 Francisco Burzi PHP-Nuke 6.5 RC3 Francisco Burzi PHP-Nuke 6.5 RC2 Francisco Burzi PHP-Nuke 6.5 RC1 Francisco Burzi PHP-Nuke 6.5 FINAL Francisco Burzi PHP-Nuke 6.5 BETA 1 Francisco Burzi PHP-Nuke 6.5 Francisco Burzi PHP-Nuke 6.0 Francisco Burzi PHP-Nuke 5.6 Francisco Burzi PHP-Nuke 5.5 Francisco Burzi PHP-Nuke 5.4 Francisco Burzi PHP-Nuke 5.3.1 Francisco Burzi PHP-Nuke 5.2 a Francisco Burzi PHP-Nuke 5.2 Francisco Burzi PHP-Nuke 5.1 Francisco Burzi PHP-Nuke 5.0.1 Francisco Burzi PHP-Nuke 5.0 Francisco Burzi PHP-Nuke 4.4.1 a Francisco Burzi PHP-Nuke 4.4 Francisco Burzi PHP-Nuke 4.3 Francisco Burzi PHP-Nuke 4.0 Francisco Burzi PHP-Nuke 3.0 - Linux kernel 2.2 Francisco Burzi PHP-Nuke 2.5 Francisco Burzi PHP-Nuke 1.0 Francisco Burzi PHP-Nuke 0.726 -3 Francisco Burzi PHP-Nuke 0.75 -RC3 Francisco Burzi PHP-Nuke 8.0 Final Francisco Burzi PHP-Nuke 8.0
Not Vulnerable:

PHP-Nuke Search Module 'sid' Parameter SQL Injection Vulnerability

PHP-Nuke is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query.

Successful exploits could allow an attacker to compromise the application, access or modify data, or exploit vulnerabilities in the underlying database.

PHP-Nuke Search Module 'sid' Parameter SQL Injection Vulnerability

An attacker can use a browser to exploit this issue.

The following exploit is available:

• /data/vulnerabilities/exploits/27408.php

PHP-Nuke Search Module 'sid' Parameter SQL Injection Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

PHP-Nuke Search Module 'sid' Parameter SQL Injection Vulnerability

References:

• PHP-Nuke Homepage (PHP-Nuke)