Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 12/11/2002 Updated: 18/10/2016

CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10

VMScore: 755

Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in PHP-Nuke prior to 6.0 allows remote authenticated users to modify the database and gain privileges via the "bio" argument to modules.php.

Vulnerable Product	Search on Vulmon	Subscribe to Product
francisco burzi php-nuke 5.6

source: wwwsecurityfocuscom/bid/6088/info A SQL injection vulnerability has been reported for PHP-Nuke 56 The vulnerability is due to insufficient sanitization of variables used to construct SQL queries in some scripts It is possible to modify the logic of SQL queries through malformed query strings in requests for the vulnerable scri ...

NVD-CWE-Other http://www.idefense.com/advisory/10.31.02c.txt http://archives.neohapsis.com/archives/vulnwatch/2002-q4/0051.html http://www.iss.net/security_center/static/10516.php http://www.securityfocus.com/bid/6088 http://www.osvdb.org/6244 http://marc.info/?l=bugtraq&m=103616324103171&w=2 https://nvd.nist.gov https://www.exploit-db.com/exploits/21977/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2002-1242

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect