Lucene search
HistoryNov 12, 2002 - 5:00 a.m.
CVE-2002-1242
cve-2002-1242
sql injection
php-nuke
database
remote authentication
vulnerability
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.5%
SQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify the database and gain privileges via the “bio” argument to modules.php.
| CPE | Name | Operator | Version |
|---|---|---|---|
| francisco_burzi:php-nuke | francisco burzi php-nuke | eq | 5.6 |
Related
cvelist
cvelist
CVE-2002-1242
2004-09-01 04:00:00
securityvulns
securityvulns
iDEFENSE Security Advisory 10.31.02c: PHP-Nuke SQL Injection Vulnerability
2002-11-02 00:00:00
nessus
nessus
PHP-Nuke Detection
2003-02-17 00:00:00
7.7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.008 Low
EPSS
Percentile
81.5%
Related for CVE-2002-1242