CVE-2004-1821: SQL Injection
SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations via the gid parameter.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1821?
CVE-2004-1821 is classified as a medium severity vulnerability due to its potential impact on database integrity and user privileges.
How do I fix CVE-2004-1821?
To fix CVE-2004-1821, it is recommended to sanitize the gid parameter input to prevent SQL injection or upgrade to a patched version of the 4nalbum module.
What software is affected by CVE-2004-1821?
CVE-2004-1821 specifically affects the 4nalbum module version 0.92 for PHP-Nuke versions 6.5 through 7.0.
What type of attack can exploit CVE-2004-1821?
CVE-2004-1821 can be exploited through SQL injection attacks, allowing unauthorized database access and privilege escalation.
Who can be impacted by CVE-2004-1821?
Users of 4nalbum 0.92 in PHP-Nuke environments can be impacted by CVE-2004-1821, exposing them to potential data breaches and unauthorized activities.