Description
SQL injection vulnerability in index.php in the Your_Account module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL commands via the username variable (Nickname field).
References
- 20060216 Critical SQL Injection PHPNuke <= 7.8 - Your_Account module mailing-list
- phpnuke-youraccount-sql-injection(24769) vdb-entry
- 18931 third-party-advisory
- 23259 vdb-entry
- 16691 vdb-entry
- 20060216 Critical SQL Injection PHPNuke <= 7.8 - Your_Account module mailing-list
- 20060216 Critical SQL Injection PHPNuke <= 7.8 - Your_Account module third-party-advisory
- 440 third-party-advisory
- ADV-2006-0636 vdb-entry