high7.5Public exploit code
CVE-2004-1821
SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- WarpSpeed 4nAlbum Module 0.92 - 'modules.php?gid' SQL Injection2004-03-15 · webapps · php · Verified
Impact
SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations via the gid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Warpspeed | 4nalbum Module | Version 0.92 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107937780222514&w=2
- http://secunia.com/advisories/11134
- http://www.osvdb.org/4294
- http://www.securityfocus.com/bid/9881
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15498
- http://marc.info/?l=bugtraq&m=107937780222514&w=2
- http://secunia.com/advisories/11134
- http://www.osvdb.org/4294
- http://www.securityfocus.com/bid/9881
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15498