SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator password via the c_mid parameter.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/9615 | Exploit Vendor Advisory |
http://marc.info/?l=bugtraq&m=107635110327066&w=2 | |
https://exchange.xforce.ibmcloud.com/vulnerabilities/15080 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-11-22 21:00
Updated : 2017-07-18 18:29
NVD link : CVE-2004-0266
Mitre link : CVE-2004-0266
JSON object : View
CWE
Products Affected
francisco_burzi
- php-nuke