medium5.0Public exploit code
CVE-2004-0266
SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Nuke 6.x/7.x - Public Message SQL Injection2004-02-09 · webapps · php · Verified
Impact
SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator password via the c_mid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Francisco Burzi | Php-Nuke | Versions 6.0, 6.5, 6.5_beta1, 6.5_final, 6.5_rc1, 6.5_rc2 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107635110327066&w=2
- http://www.securityfocus.com/bid/9615
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15080
- http://marc.info/?l=bugtraq&m=107635110327066&w=2
- http://www.securityfocus.com/bid/9615
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15080