medium4.6Public exploit code
CVE-2004-2008
SQL injection vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to execute arbitrary SQL via the jokeid parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Adam Webb NukeJokes 1.7/2.0 Module - 'modules.php?jokeid' SQL Injection2004-05-08 · webapps · php · Verified
Impact
SQL injection vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to execute arbitrary SQL via the jokeid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Adam Webb | Nukejokes | Versions 1.7, 2.0_beta |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=108404714232579&w=2
- http://secunia.com/advisories/11579
- http://www.securityfocus.com/bid/10306
- http://www.waraxe.us/index.php?modname=sa&id=28
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16099
- http://marc.info/?l=bugtraq&m=108404714232579&w=2
- http://secunia.com/advisories/11579
- http://www.securityfocus.com/bid/10306
- http://www.waraxe.us/index.php?modname=sa&id=28
- https://exchange.xforce.ibmcloud.com/vulnerabilities/16099