CVE-2008-1315: PHP-Nuke zClassifieds Module

Record summary

CVE-2008-1315 has a selected CVSS score of 7.5; EIP currently links 1 catalogued exploit.

Description

SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter to modules.php.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits: 1

Proofs of concept

Catalogued exploits

ExploitDBPHP-Nuke zClassifieds Module - 'cat' SQL InjectionExploitDB exploitby LovebugNot analyzed1 file

ExploitDB

PoC details

References

3736Third-party advisory

http://securityreason.com/securityalert/3736

rbt-4.net

http://www.rbt-4.net/forum/viewthread.php?forum_id=51&thread_id=3109

20080311 PHP-Nuke Module ZClassifieds [cat] SQL Injectionmailing list

http://www.securityfocus.com/archive/1/489416/100/0/threaded

28211vdb entry

http://www.securityfocus.com/bid/28211

zclassifieds-modules-sql-injection(41149)vdb entry

https://exchange.xforce.ibmcloud.com/vulnerabilities/41149

nvd.nist.gov

https://nvd.nist.gov/vuln/detail/CVE-2008-1315