CVE-2004-0269: SQL Injection
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the WebLinks module.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0269?
CVE-2004-0269 has been classified with high severity due to its potential to allow remote attackers to execute arbitrary SQL code.
What versions of PHP-Nuke are affected by CVE-2004-0269?
CVE-2004-0269 affects PHP-Nuke versions 6.9 and earlier, and possibly 7.x.
How do I fix CVE-2004-0269?
To fix CVE-2004-0269, upgrade to a version of PHP-Nuke that is not vulnerable, preferably a version later than 6.9.
What type of vulnerability is CVE-2004-0269?
CVE-2004-0269 is classified as an SQL injection vulnerability.
Can CVE-2004-0269 lead to data exposure?
Yes, CVE-2004-0269 can lead to data exposure as it allows attackers to inject and execute arbitrary SQL commands.