CVE-2021-30177

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution. This occurs because the U.S. state is not validated to be two letters, and the OrderBy field is not validated to be one of LASTNAME, CITY, or STATE.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://gist.github.com/stacksmasher007/41e946fc9a5a2f0b6950626cc9d43d47Exploit, Third Party Advisory
https://gist.github.com/stacksmasher007/41e946fc9a5a2f0b6950626cc9d43d47Exploit, Third Party Advisory

Timeline

Published: Apr 7, 2021
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2021

CVE-2021-301785.5An issue was discovered in the Linux kernel through 5.11.11. synic_get in arch/x86/kvm/hyperv.c has a NULL pointer dereference for certain a CVE-2021-301799.8Apache Dubbo prior to 2.6.9 and 2.7.9 by default supports generic calls to arbitrary methods exposed by provider interfaces. These invocatio CVE-2021-30189.8ipeak Infosystems ibexwebCMS (aka IPeakCMS) 3.5 is vulnerable to an unauthenticated Boolean-based SQL injection via the id parameter on the CVE-2021-301809.8Apache Dubbo prior to 2.7.9 support Tag routing which will enable a customer to route the request to the right server. These rules are used CVE-2021-301819.8Apache Dubbo prior to 2.6.9 and 2.7.9 supports Script routing which will enable a customer to route the request to the right server. These r CVE-2021-301837.5Cleartext storage of sensitive information in multiple versions of Octopus Server where in certain situations when running import or export CVE-2021-301847.8GNU Chess 6.2.7 allows attackers to execute arbitrary code via crafted PGN (Portable Game Notation) data. This is related to a buffer overfl CVE-2021-301857.5CERN Indico before 2.3.4 can use an attacker-supplied Host header in a password reset link.CVE-2021-301867.5CODESYS V2 runtime system SP before 2.4.7.55 has a Heap-based Buffer Overflow.CVE-2021-301875.3CODESYS V2 runtime system SP before 2.4.7.55 has Improper Neutralization of Special Elements used in an OS Command.CVE-2021-301889.8CODESYS V2 runtime system SP before 2.4.7.55 has a Stack-based Buffer Overflow.CVE-2021-301899.8CODESYS V2 Web-Server before 1.1.9.20 has a Stack-based Buffer Overflow.