 |
Home ▼ Bookkeeping
Online ▼ Security
Audits ▼
Managed
DNS ▼
About
Order
FAQ
Acceptable Use Policy
Dynamic DNS Clients
Configure Domains Dyanmic DNS Update Password Network
Monitor ▼
Enterprise Package
Advanced Package
Standard Package
Free Trial
FAQ
Price/Feature Summary
Order/Renew
Examples
Configure/Status Alert Profiles | ||
| CVE ID: | CVE-2004-0269 |
| Description: | SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module. |
| Test IDs: | 1.3.6.1.4.1.25623.1.0.52509 1.3.6.1.4.1.25623.1.0.52438 |
| Cross References: |
Common Vulnerability Exposure (CVE) ID: CVE-2004-0269 BugTraq ID: 9630 http://www.securityfocus.com/bid/9630 Bugtraq: 20040210 [SCAN Associates Sdn Bhd Security Advisory] PHPNuke 6.9 > and below SQL Injection in multiple module (Google Search) http://marc.info/?l=bugtraq&m=107643348117646&w=2 http://www.scan-associates.net/papers/phpnuke69.txt XForce ISS Database: phpnuke-modules-sql-injection(15115) https://exchange.xforce.ibmcloud.com/vulnerabilities/15115 |