Unrated severityNVD Advisory· Published Nov 24, 2005· Updated Jun 16, 2026
CVE-2005-3792
CVE-2005-3792
Description
Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
8cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*+ 7 more
- cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:7.7:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*
- (no CPE)range: <=7.8 (and 7.9 before patch 3.1)
Patches
Vulnerability mechanics
References
13- securityreason.com/achievement_exploitalert/5nvdExploit
- www.securityfocus.com/bid/15421nvdExploit
- secunia.com/advisories/17543/nvdVendor Advisory
- archives.neohapsis.com/archives/fulldisclosure/2005-11/0454.htmlnvd
- marc.infonvd
- securitytracker.com/idnvd
- securitytracker.com/idnvd
- www.osvdb.org/20866nvd
- www.securityfocus.com/archive/1/425508/100/0/threadednvd
- www.securityfocus.com/archive/1/425627/100/0/threadednvd
- www.vupen.com/english/advisories/2005/2446nvd
- www.waraxe.us/advisory-46.htmlnvd
- exchange.xforce.ibmcloud.com/vulnerabilities/23079nvd
News mentions
0No linked articles in our index yet.