sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote attackers to gain SQL query information by setting the sql_debug parameter to (1) index.php and (2) modules.php.
References
Link | Resource |
---|---|
http://www.securityfaq.com/unixfocus/5OP041P6BE.html | Exploit |
http://www.securityfocus.com/bid/3906 | Exploit |
Configurations
Configuration 1 (hide)
|
Information
Published : 2002-12-30 21:00
Updated : 2008-09-05 13:32
NVD link : CVE-2002-2032
Mitre link : CVE-2002-2032
JSON object : View
CWE
Products Affected
francisco_burzi
- php-nuke