Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-mjmp-9722-7h88

Опубликовано: 29 апр. 2022
Источник: github
Github: Не прошло ревью

Описание

SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter.

SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter.

EPSS

Процентиль: 33%
0.00131
Низкий

Связанные уязвимости

nvd
почти 22 года назад

SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter.

EPSS

Процентиль: 33%
0.00131
Низкий