CVE-2003-1210: SQL Injection
Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1210?
CVE-2003-1210 is considered a high-severity vulnerability due to the potential for remote SQL injection attacks.
How do I fix CVE-2003-1210?
To fix CVE-2003-1210, you should update PHP-Nuke to a version that is not vulnerable, specifically any version later than 6.5.
Which versions of PHP-Nuke are affected by CVE-2003-1210?
CVE-2003-1210 affects PHP-Nuke versions 5.x through 6.5, including 6.5_beta1, 6.5_rc1, 6.5_rc2, 6.5_rc3, and 6.5_final.
What are the main attack vectors for CVE-2003-1210?
The main attack vectors for CVE-2003-1210 are SQL injection through the 'lid' parameter in the getit function and the 'min' parameter in the search function.
Can CVE-2003-1210 be exploited remotely?
Yes, CVE-2003-1210 can be exploited remotely, allowing attackers to execute arbitrary SQL commands on the PHP-Nuke application.