Public exploit available
Public proof-of-concept or exploit code exists (ExploitDB / Metasploit / Nuclei).

CVE-2004-0266 — SQL Injection in Burzi Php-nuke

4 documents4 sources
Severity
5.0MEDIUMNVD
EPSS
0.0%
top 92.85%
CISA KEV
Not in KEV
Exploit
PoC available
Public exploit / PoC exists
Affected products
1
Francisco Burzi Php-nuke
Timeline
PublishedNov 23
Latest updateApr 29

Description

SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator password via the c_mid parameter.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDfrancisco_burzi/php-nuke13 versions+12

🔴Vulnerability Details

2
GHSA
GHSA-c8j5-94mc-2xxr: SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6↗2022-04-29
▶
CVEList
CVE-2004-0266: SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6↗2004-03-18
▶

💥Exploits & PoCs

1
Exploit-DB
PHP-Nuke 6.x/7.x - Public Message SQL Injection↗2004-02-09
▶