NetSight
IP …
high7.5Public exploit code

CVE-2004-1929

SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain acce…

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter.

Affected products

VendorProductAffected versions
Francisco BurziPhp-Nuke
Versions 5.5, 6.0, 6.5, 6.5_beta1, 6.5_final, 6.5_rc1

References