CVE-2003-1340: SQL Injection
Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to execute arbitrary SQL commands via (1) a uid (user) cookie to modules.php; and allow remote attackers to execute arbitrary SQL commands via an aid (admin) cookie to the WebLinks module in a (2) viewlink, (3) MostPopular, or (4) NewLinksDate action, different vectors than CVE-2003-0279.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2003-1340?
CVE-2003-1340 is classified as a high severity vulnerability due to the potential for remote exploitation of SQL injection.
How do I fix CVE-2003-1340?
To fix CVE-2003-1340, it's recommended to upgrade PHP-Nuke to a secure version that is not affected by these SQL injection vulnerabilities.
What versions of PHP-Nuke are affected by CVE-2003-1340?
PHP-Nuke versions 5.6 and 6.5 are affected by CVE-2003-1340.
Who can exploit CVE-2003-1340?
Both remote authenticated users and remote attackers can exploit CVE-2003-1340 to execute arbitrary SQL commands.
What is SQL injection in the context of CVE-2003-1340?
In the context of CVE-2003-1340, SQL injection refers to the misuse of user inputs that allow attackers to manipulate SQL queries.