Nucleus CMS Action.PHP SQL Injection...

- AV AC AU C I A
发布: 2004-07-26
修订: 2025-04-13

An SQL injection vulnerability is identified in the Nucleus CMS application that may allow attackers to pass malicious input to database queries, resulting in the modification of query logic or other attacks. This vulnerability exists due to insufficient sanitization of user-supplied input through the 'action.php' script. It may be possible for a remote user to inject arbitrary SQL queries into the underlying database used by the application. This could permit remote attackers to pass malicious input to database queries, resulting in modification of query logic or other attacks.

0%
暂无可用Exp或PoC
当前有0条受影响产品信息