high7.5
CVE-2004-2056
SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute arbitrary SQL statements via the itemid parameter.
Impact
SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute arbitrary SQL statements via the itemid parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Nucleus Group | Nucleus Cms | Version 3.01 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=109087144509299&w=2
- http://secunia.com/advisories/13136
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18002
- http://marc.info/?l=bugtraq&m=109087144509299&w=2
- http://secunia.com/advisories/13136
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18002