CVE-2004-2000

2005-05-1004:00:00

mitre

www.cve.org

8.2 High

AI Score

Confidence

Low

0.01 Low

EPSS

Percentile

83.8%

JSON

SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL via the (1) orderby or (2) sid parameters to modules.php.

References

marc.info/?l=bugtraq&m=108378804809891&w=2

osvdb.org/52223

secunia.com/advisories/11553

www.securityfocus.com/archive/1/488452/100/0/threaded

www.securityfocus.com/bid/10282

www.securityfocus.com/bid/27932

www.waraxe.us/index.php?modname=sa&id=27

exchange.xforce.ibmcloud.com/vulnerabilities/16074