Beveiligingsadvies

CVE-2021-30177

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2021-04-07 10:48:16

Laatst bijgewerkt 2024-08-03 22:24:59

Toegewezen door mitre

CVSS-score geen score

Status PUBLISHED

Beschrijving

There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution. This occurs because the U.S. state is not validated to be two letters, and the OrderBy field is not validated to be one of LASTNAME, CITY, or STATE.

← Alle CVE's bekijken Bekijk op cve.org ↗