SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator password via the c_mid parameter.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/9615 | Exploit Vendor Advisory |
| http://marc.info/?l=bugtraq&m=107635110327066&w=2 | |
| https://exchange.xforce.ibmcloud.com/vulnerabilities/15080 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-11-22 21:00
Updated : 2017-07-18 18:29
NVD link : CVE-2004-0266
Mitre link : CVE-2004-0266
JSON object : View
CWE
Products Affected
francisco_burzi
- php-nuke


