Lucene search
HistoryNov 23, 2004 - 5:00 a.m.
CVE-2004-0269
cve-2004-0269
sql injection
php-nuke 6.9
remote attackers
sensitive information
nvd
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.4 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.3%
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.
Affected configurations
Node
francisco_burziphp-nukeMatch1.0
ORfrancisco_burziphp-nukeMatch2.5
ORfrancisco_burziphp-nukeMatch3.0
ORfrancisco_burziphp-nukeMatch4.0
ORfrancisco_burziphp-nukeMatch4.3
ORfrancisco_burziphp-nukeMatch4.4
ORfrancisco_burziphp-nukeMatch4.4.1a
ORfrancisco_burziphp-nukeMatch5.0
ORfrancisco_burziphp-nukeMatch5.0.1
ORfrancisco_burziphp-nukeMatch5.1
ORfrancisco_burziphp-nukeMatch5.2
ORfrancisco_burziphp-nukeMatch5.2a
ORfrancisco_burziphp-nukeMatch5.3.1
ORfrancisco_burziphp-nukeMatch5.4
ORfrancisco_burziphp-nukeMatch5.5
ORfrancisco_burziphp-nukeMatch5.6
ORfrancisco_burziphp-nukeMatch6.0
ORfrancisco_burziphp-nukeMatch6.5
ORfrancisco_burziphp-nukeMatch6.5_beta1
ORfrancisco_burziphp-nukeMatch6.5_final
ORfrancisco_burziphp-nukeMatch6.5_rc1
ORfrancisco_burziphp-nukeMatch6.5_rc2
ORfrancisco_burziphp-nukeMatch6.5_rc3
ORfrancisco_burziphp-nukeMatch6.6
ORfrancisco_burziphp-nukeMatch6.7
ORfrancisco_burziphp-nukeMatch6.9
Related
cvelist
cvelist
CVE-2004-0269
2004-03-18 05:00:00
openvas
openvas
FreeBSD Ports: phpnuke
2008-09-04 00:00:00
FreeBSD Ports: phpnuke
2008-09-04 00:00:00
FreeBSD Ports: phpnuke
2008-09-04 00:00:00
nvd
nvd
CVE-2004-0269
2004-11-23 05:00:00
freebsd
freebsd
Several vulnerabilities found in PHPNuke
2004-05-05 00:00:00
nessus
nessus
FreeBSD : Several vulnerabilities found in PHPNuke (33ab4a47-bfc1-11d8-b00e-000347a4fa7d)
2009-04-23 00:00:00
FreeBSD : Several vulnerabilities found in PHPNuke (147)
2004-07-06 00:00:00
6.4 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:P/A:N
7.4 High
AI Score
Confidence
Low
0.003 Low
EPSS
Percentile
68.3%
Related for CVE-2004-0269