CVE-2020-21808: NukeViet SQL Injection vulnerability via topicsid parameter
Summary
CVE-2020-21808: NukeViet SQL Injection vulnerability via topicsid parameter. Affects nukeviet/nukeviet versions >= 4.0.10, < 4.3.08. Fixed in 4.3.08. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
NukeViet CMS is an open-source content management system that allows users to create and manage websites. It is written in PHP and is widely used for various web applications. The vulnerability in question affects NukeViet CMS versions 4.0.10 to 4.3.07. This vulnerability arises from a SQL Injection flaw present in the addtotopics.php file located in the modules/news/admin directory. The vulnerability can be exploited by an attacker through the topicsid parameter, allowing them to execute arbitrary SQL queries and potentially gain unauthorized access to the CMS's database.
Vulnerability Detail
The SQL Injection vulnerability in NukeViet CMS allows an attacker to manipulate the topicsid parameter in the addtotopics.php file. By injecting malicious SQL code, an attacker can bypass input validation and execute arbitrary SQL queries. This can lead to various malicious activities, such as unauthorized access to the database, data manipulation, or even complete compromise of the CMS. The severity of this vulnerability is rated as CRITICAL with a CVSS score of 9.8.
How To Fix
Minimum fixed version
4.3.08
This is the first release that contains the fix.
composer require nukeviet/nukeviet:4.3.08Tip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, users can modify the affected file addtotopics.php by implementing input validation and sanitization techniques. Here is an example of how to sanitize the topicsid parameter using PHP's mysqli_real_escape_string function:
$topicsid = mysqli_real_escape_string($connection, $_GET['topicsid']);
Conclusion
The SQL Injection vulnerability in NukeViet CMS versions 4.0.10 to 4.3.07 can be exploited by manipulating the topicsid parameter in the addtotopics.php file. It is crucial for users to update their CMS installation to version 4.3.08 or later to mitigate the risk of unauthorized access and potential compromise of their websites. For further assistance and support in vulnerability remediation, please contact DevNack.com.
See every vulnerability recorded for nukeviet/nukeviet →
FAQ
NukeViet CMS is an open-source content management system written in PHP that allows users to create and manage websites.
Versions 4.0.10 to 4.3.07 of NukeViet CMS are affected by this SQL Injection vulnerability.
This vulnerability allows an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access to the CMS's database and other malicious activities.
To fix this vulnerability, it is recommended to upgrade to NukeViet CMS version 4.3.08 or later.
Yes, a temporary workaround is to implement input validation and sanitization techniques in the affected file addtotopics.php.
Related vulnerabilities
Recent vulnerabilities recorded for nukeviet/nukeviet.
