cpe:/a:ravenphpscripts:ravennuke:2.30 CVE-2009-0672 2009-02-22T17:30:00.890-05:00 2017-09-28T21:33:57.230-04:00 6.5 NETWORK LOW SINGLE_INSTANCE PARTIAL PARTIAL PARTIAL http://nvd.nist.gov 2009-02-23T16:29:00.000-05:00 BUGTRAQ 20090216 [waraxe-2009-SA#072] - Multiple Vulnerabilities in RavenNuke 2.3.0 BID 33787 OSVDB 52298 EXPLOIT-DB 8068 CONFIRM http://ravenphpscripts.com/postt17156.html MISC http://www.waraxe.us/advisory-72.html XF ravennuke-modules-sql-injection(48791) SQL injection vulnerability in the Resend_Email module in Raven Web Services RavenNuke 2.30 allows remote authenticated administrators to execute arbitrary SQL commands via the user_prefix parameter to modules.php.