CVE-2004-0738

The CVE-2004-0738 entry documents multiple SQL injection vulnerabilities in the Php-Nuke Search module, exploitable via the min or categ parameters to allow remote arbitrary SQL execution. Affected software: Php-Nuke (Search module). Root cause: input unsafely concatenated into SQL queries (as de...

CVE-2004-0738

Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote attackers to execute arbitrary SQL via the 1 min or 2 categ parameters...