vendor:
News Module
by:
SecurityFocus
7.5
CVSS
HIGH
Input Validation Error
20
CWE
Product Name: News Module
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: N/A
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2002
PHPNuke News Module Input Validation Error
It has been reported that an input validation error exists in the article.php file included with PHPNuke as part of the News module. Because of this, an attacker could send a malicious string through PHPNuke that would allow the attacker to manipulate the database, and gain unauthorized access to user accounts. An example of this exploit is provided in the text.
Mitigation:
Input validation should be used to prevent malicious strings from being sent to the application.
