CVE-2002-2032

2002-12-3105:00:00

[email protected]

web.nvd.nist.gov

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:N/A:N

AI Score

7.2

Confidence

Low

EPSS

0.024

Percentile

90.1%

JSON

sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote attackers to gain SQL query information by setting the sql_debug parameter to (1) index.php and (2) modules.php.

Affected configurations

Nvd

Node

francisco_burziphp-nukeMatch1.0

francisco_burziphp-nukeMatch2.5

francisco_burziphp-nukeMatch3.0

francisco_burziphp-nukeMatch4.0

francisco_burziphp-nukeMatch4.3

francisco_burziphp-nukeMatch4.4

francisco_burziphp-nukeMatch4.4.1a

francisco_burziphp-nukeMatch5.0

francisco_burziphp-nukeMatch5.0.1

francisco_burziphp-nukeMatch5.1

francisco_burziphp-nukeMatch5.2

francisco_burziphp-nukeMatch5.2a

francisco_burziphp-nukeMatch5.3.1

francisco_burziphp-nukeMatch5.4

VendorProductVersionCPE
francisco_burziphp-nuke1.0cpe:2.3:a:francisco_burzi:php-nuke:1.0:*:*:*:*:*:*:*
francisco_burziphp-nuke2.5cpe:2.3:a:francisco_burzi:php-nuke:2.5:*:*:*:*:*:*:*
francisco_burziphp-nuke3.0cpe:2.3:a:francisco_burzi:php-nuke:3.0:*:*:*:*:*:*:*
francisco_burziphp-nuke4.0cpe:2.3:a:francisco_burzi:php-nuke:4.0:*:*:*:*:*:*:*
francisco_burziphp-nuke4.3cpe:2.3:a:francisco_burzi:php-nuke:4.3:*:*:*:*:*:*:*
francisco_burziphp-nuke4.4cpe:2.3:a:francisco_burzi:php-nuke:4.4:*:*:*:*:*:*:*
francisco_burziphp-nuke4.4.1acpe:2.3:a:francisco_burzi:php-nuke:4.4.1a:*:*:*:*:*:*:*
francisco_burziphp-nuke5.0cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*
francisco_burziphp-nuke5.0.1cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:*:*:*:*:*:*:*
francisco_burziphp-nuke5.1cpe:2.3:a:francisco_burzi:php-nuke:5.1:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
francisco_burzi	php-nuke	1.0	cpe:2.3:a:francisco_burzi:php-nuke:1.0:::::::*
francisco_burzi	php-nuke	2.5	cpe:2.3:a:francisco_burzi:php-nuke:2.5:::::::*
francisco_burzi	php-nuke	3.0	cpe:2.3:a:francisco_burzi:php-nuke:3.0:::::::*
francisco_burzi	php-nuke	4.0	cpe:2.3:a:francisco_burzi:php-nuke:4.0:::::::*
francisco_burzi	php-nuke	4.3	cpe:2.3:a:francisco_burzi:php-nuke:4.3:::::::*
francisco_burzi	php-nuke	4.4	cpe:2.3:a:francisco_burzi:php-nuke:4.4:::::::*
francisco_burzi	php-nuke	4.4.1a	cpe:2.3:a:francisco_burzi:php-nuke:4.4.1a:::::::*
francisco_burzi	php-nuke	5.0	cpe:2.3:a:francisco_burzi:php-nuke:5.0:::::::*
francisco_burzi	php-nuke	5.0.1	cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:::::::*
francisco_burzi	php-nuke	5.1	cpe:2.3:a:francisco_burzi:php-nuke:5.1:::::::*