{"id":"CVE-2019-7726","published":"2020-12-31T04:26:00Z","modified":"2024-08-04T20:54:28Z","title":"modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP…","vendor":null,"product":null,"tier":"tail","description":{"text":"modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).","provenance":"source","from":"CVE.org"},"cvss":null,"epss":{"score":0.02309,"percentile":0.83379,"provenance":"source"},"cwes":[],"references":[{"url":"https://github.com/nukeviet/nukeviet/blob/4.3.04/CHANGELOG.txt","tags":["x_refsource_MISC"]},{"url":"https://github.com/nukeviet/nukeviet/blob/nukeviet4.3/CHANGELOG.txt","tags":["x_refsource_MISC"]},{"url":"https://github.com/nukeviet/nukeviet/compare/4.3.03...4.3.04","tags":["x_refsource_CONFIRM"]},{"url":"https://github.com/nukeviet/nukeviet/pull/2740/commits/05dfb9b4531f12944fe39556f58449b9a56241be","tags":["x_refsource_MISC"]}],"priority":{"score":16.7,"factors":[{"name":"EPSS percentile","points":16.68}]},"affected":[{"ecosystem":"Packagist","package":"nukeviet/nukeviet","vulnerableRanges":["<4.3.04"],"patched":["4.3.04"],"from":["GHSA-q4qv-fmwc-qxpx"],"provenance":"source"}],"euvd":{"id":"EUVD-2021-1377","exploited":false,"provenance":"source"},"lineage":{"packageHistory":[{"cve":"CVE-2020-21809","published":"2021-07-29","fixed":"4.2.01","kev":false},{"cve":"CVE-2019-7725","published":"2020-12-31","fixed":"4.3.04","kev":false},{"cve":"CVE-2019-7726","published":"2020-12-31","fixed":"4.3.04","kev":false},{"cve":"CVE-2020-21808","published":"2021-07-29","fixed":"4.3.08","kev":false,"link":{"from":"CVE-2019-7726","to":"CVE-2020-21808","relation":"successor","confidence":"low","kind":"sequence","evidence":[{"kind":"version-step","provenance":"source","package":"Packagist:nukeviet/nukeviet","fromFixed":"4.3.04","toFixed":"4.3.08","daysApart":210}]}},{"cve":"CVE-2020-22765","published":"2021-07-29","fixed":"4.4.01","kev":false},{"cve":"CVE-2022-3975","published":"2022-11-13","fixed":"4.5","kev":false}],"package":"Packagist:nukeviet/nukeviet"}}