CVE-2003-1340 in PHP-Nukeinfo

Zusammenfassung

von MITRE

Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to execute arbitrary SQL commands via (1) a uid (user) cookie to modules.php; and allow remote attackers to execute arbitrary SQL commands via an aid (admin) cookie to the Web_Links module in a (2) viewlink, (3) MostPopular, or (4) NewLinksDate action, different vectors than CVE-2003-0279.

If you want to get best quality of vulnerability data, you may have to visit VulDB.

Reservieren

30.09.2007

Veröffentlichung

31.12.2003

Moderieren

akzeptiert

Eintrag

VDB-21263

CPE

bereit

EPSS

0.00950

KEV

nein

Aktivitäten

very low

Quellen

Want to stay up to date on a daily basis?

Enable the mail alert feature now!