CVE-2006-0870

SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: version 2.3 was later reported to be vulnerable as well.

CVSS Metrics

Affected Products (1)

GitHub Security Advisory GHSA-q2hx-whxr-j856

SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote...

References (20)

• http://secunia.com/advisories/18439 Exploit, Vendor Advisory
• http://www.nukedx.com/?viewdoc=9 Exploit
• http://www.osvdb.org/23438
• http://www.securityfocus.com/archive/1/425599/100/0/threaded
• http://www.securityfocus.com/archive/1/428361/100/0/threaded
• http://www.securityfocus.com/archive/1/431602/100/0/threaded
• http://www.securityfocus.com/archive/1/431714/100/0/threaded
• http://www.securityfocus.com/bid/16730 Exploit
• http://www.securityfocus.com/bid/17636 Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/24803
• http://secunia.com/advisories/18439 Exploit, Vendor Advisory
• http://www.nukedx.com/?viewdoc=9 Exploit
• http://www.osvdb.org/23438
• http://www.securityfocus.com/archive/1/425599/100/0/threaded
• http://www.securityfocus.com/archive/1/428361/100/0/threaded