SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-11-22 21:00
Updated : 2017-07-10 18:30
NVD link : CVE-2004-0269
Mitre link : CVE-2004-0269
JSON object : View
CWE
Products Affected
francisco_burzi
- php-nuke