CVE-2004-0269: SQL Injection
First published: Thu Mar 18 2004(Updated: )
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| PHP-Nuke | =4.0 | |
| PHP-Nuke | =5.3.1 | |
| PHP-Nuke | =5.1 | |
| PHP-Nuke | =6.5_beta1 | |
| PHP-Nuke | =6.5 | |
| PHP-Nuke | =4.3 | |
| PHP-Nuke | =1.0 | |
| PHP-Nuke | =4.4 | |
| PHP-Nuke | =2.5 | |
| PHP-Nuke | =3.0 | |
| PHP-Nuke | =5.0 | |
| PHP-Nuke | =5.5 | |
| PHP-Nuke | =5.4 | |
| PHP-Nuke | =6.5_rc2 | |
| PHP-Nuke | =5.2a | |
| PHP-Nuke | =6.5_rc3 | |
| PHP-Nuke | =5.0.1 | |
| PHP-Nuke | =5.2 | |
| PHP-Nuke | =5.6 | |
| PHP-Nuke | =6.0 | |
| PHP-Nuke | =6.5_final | |
| PHP-Nuke | =6.7 | |
| PHP-Nuke | =6.6 | |
| PHP-Nuke | =6.9 | |
| PHP-Nuke | =4.4.1a | |
| PHP-Nuke | =6.5_rc1 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2004-0269?
CVE-2004-0269 has been classified with high severity due to its potential to allow remote attackers to execute arbitrary SQL code.
What versions of PHP-Nuke are affected by CVE-2004-0269?
CVE-2004-0269 affects PHP-Nuke versions 6.9 and earlier, and possibly 7.x.
How do I fix CVE-2004-0269?
To fix CVE-2004-0269, upgrade to a version of PHP-Nuke that is not vulnerable, preferably a version later than 6.9.
What type of vulnerability is CVE-2004-0269?
CVE-2004-0269 is classified as an SQL injection vulnerability.
Can CVE-2004-0269 lead to data exposure?
Yes, CVE-2004-0269 can lead to data exposure as it allows attackers to inject and execute arbitrary SQL commands.
- agent/references
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/last-modified-date
- agent/remedy
- agent/author
- agent/weakness
- agent/first-publish-date
- agent/description
- agent/event
- agent/source
- agent/tags
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-index
- vendor/francisco burzi
- canonical/php-nuke
- version/php-nuke/4.0
- version/php-nuke/5.3.1
- version/php-nuke/5.1
- version/php-nuke/6.5_beta1
- version/php-nuke/6.5
- version/php-nuke/4.3
- version/php-nuke/1.0
- version/php-nuke/4.4
- version/php-nuke/2.5
- version/php-nuke/3.0
- version/php-nuke/5.0
- version/php-nuke/5.5
- version/php-nuke/5.4
- version/php-nuke/6.5_rc2
- version/php-nuke/5.2a
- version/php-nuke/6.5_rc3
- version/php-nuke/5.0.1
- version/php-nuke/5.2
- version/php-nuke/5.6
- version/php-nuke/6.0
- version/php-nuke/6.5_final
- version/php-nuke/6.7
- version/php-nuke/6.6
- version/php-nuke/6.9
- version/php-nuke/4.4.1a
- version/php-nuke/6.5_rc1