high7.5Public exploit code
CVE-2002-1242
SQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify the database and gain privileges via the "bio" argument to modul…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Nuke 5.6 - 'modules.php' SQL Injection2002-11-01 · webapps · php · Verified
Impact
SQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify the database and gain privileges via the "bio" argument to modules.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Francisco Burzi | Php-Nuke | Version 5.6 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0051.html
- http://marc.info/?l=bugtraq&m=103616324103171&w=2
- http://www.idefense.com/advisory/10.31.02c.txt
- http://www.iss.net/security_center/static/10516.php
- http://www.osvdb.org/6244
- http://www.securityfocus.com/bid/6088
- http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0051.html
- http://marc.info/?l=bugtraq&m=103616324103171&w=2
- http://www.idefense.com/advisory/10.31.02c.txt
- http://www.iss.net/security_center/static/10516.php
- http://www.osvdb.org/6244
- http://www.securityfocus.com/bid/6088