Search: Home Bugtraq Vulnerabilities Mailing Lists Jobs Tools Beta Programs

BareNuked CMS 'admin/users.php' SQL Injection Vulnerability

BareNuked CMS is prone to an SQL-injection vulnerability because it fails to properly sanitize user-supplied input before using it in an SQL query.

An attacker can exploit this vulnerability to gain administrative access to the affected application; other attacks are also possible.

BareNuked CMS 1.1.0 is vulnerable; other versions may also be affected.







 

Privacy Statement
Copyright 2009, SecurityFocus