CVE-2003-0279: SQL Injection
Multiple SQL injection vulnerabilities in the WebLinks module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-0279?
CVE-2003-0279 is classified as a high severity vulnerability due to its potential to allow remote attackers to access sensitive information.
How do I fix CVE-2003-0279?
To fix CVE-2003-0279, upgrade PHP-Nuke to a version that is not vulnerable, such as 6.5 or later.
Which versions of PHP-Nuke are affected by CVE-2003-0279?
CVE-2003-0279 affects PHP-Nuke versions 5.0 through 6.5.
What type of vulnerability is CVE-2003-0279?
CVE-2003-0279 is an SQL injection vulnerability that allows attackers to manipulate database queries.
What are common attack vectors for CVE-2003-0279?
Common attack vectors for CVE-2003-0279 include exploiting the viewlink function and manipulating the cid parameter in requests.