6.4

CVE-2004-0269

Exploit

SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.

Data is provided by the National Vulnerability Database (NVD)
Francisco Burzi ≫ Php-nuke Version1.0
Francisco Burzi ≫ Php-nuke Version2.5
Francisco Burzi ≫ Php-nuke Version3.0
Francisco Burzi ≫ Php-nuke Version4.0
Francisco Burzi ≫ Php-nuke Version4.3
Francisco Burzi ≫ Php-nuke Version4.4
Francisco Burzi ≫ Php-nuke Version4.4.1a
Francisco Burzi ≫ Php-nuke Version5.0
Francisco Burzi ≫ Php-nuke Version5.0.1
Francisco Burzi ≫ Php-nuke Version5.1
Francisco Burzi ≫ Php-nuke Version5.2
Francisco Burzi ≫ Php-nuke Version5.2a
Francisco Burzi ≫ Php-nuke Version5.3.1
Francisco Burzi ≫ Php-nuke Version5.4
Francisco Burzi ≫ Php-nuke Version5.5
Francisco Burzi ≫ Php-nuke Version5.6
Francisco Burzi ≫ Php-nuke Version6.0
Francisco Burzi ≫ Php-nuke Version6.5
Francisco Burzi ≫ Php-nuke Version6.5_beta1
Francisco Burzi ≫ Php-nuke Version6.5_final
Francisco Burzi ≫ Php-nuke Version6.5_rc1
Francisco Burzi ≫ Php-nuke Version6.5_rc2
Francisco Burzi ≫ Php-nuke Version6.5_rc3
Francisco Burzi ≫ Php-nuke Version6.6
Francisco Burzi ≫ Php-nuke Version6.7
Francisco Burzi ≫ Php-nuke Version6.9
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Type Source Score Percentile
EPSS FIRST.org 0.12% 0.309
CVSS Metriken
Source Base Score Exploit Score Impact Score Vector string
nvd@nist.gov 6.4 10 4.9
AV:N/AC:L/Au:N/C:P/I:P/A:N
http://www.securityfocus.com/bid/9630
Patch
Vendor Advisory
Exploit