Lucene search

[email protected]CVE-2005-0999

HistoryMay 02, 2005 - 4:00 a.m.

CVE-2005-0999

2005-05-0204:00:00

NVD-CWE-Other

[email protected]

web.nvd.nist.gov

security

php-nuke

sql injection

vulnerability

remote execution

9.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

64.5%

JSON

SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylang parameter.

CPENameOperatorVersion
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_beta1
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.0
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.4
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.5
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.2
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.0_final
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_rc2
francisco_burzi:php-nukefrancisco burzi php-nukeeq7.3
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_rc3

CPE	Name	Operator	Version
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_beta1
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.0
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.4
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.5
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.2
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.0_final
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_rc2
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	7.3
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_rc3

Rows per page:

1-10 of 181

References

marc.info/?l=bugtraq&m=111281649616901&w=2

www.waraxe.us/advisory-41.html

9.4 High

AI Score

Confidence

Low

7.5 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:P/I:P/A:P

0.002 Low

EPSS

Percentile

64.5%

JSON