CVEvulnerability
CVE-2003-0279
2.6 LOW
Official page ↗
- Status
- Modified
- Published
- 2003-06-16
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.6 LOW — AV:N/AC:H/Au:N/C:P/I:N/A:N
Description
Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php.
Affected configurations
• francisco burzi php-nuke 5.0
• francisco burzi php-nuke 6.0
References
- http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html archives.neohapsis.com
- http://marc.info/?l=bugtraq&m=105276019312980&w=2 marc.info
- http://www.securityfocus.com/bid/7558 www.securityfocus.com
- http://www.securityfocus.com/bid/7588 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11984 exchange.xforce.ibmcloud.com
- http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html archives.neohapsis.com
- http://marc.info/?l=bugtraq&m=105276019312980&w=2 marc.info
- http://www.securityfocus.com/bid/7558 www.securityfocus.com
- http://www.securityfocus.com/bid/7588 www.securityfocus.com
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11984 exchange.xforce.ibmcloud.com