First published: Thu Apr 07 2005(Updated: )
SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylang parameter.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
PHP-Nuke | =6.5_beta1 | |
PHP-Nuke | =6.5 | |
PHP-Nuke | =7.0 | |
PHP-Nuke | =7.4 | |
PHP-Nuke | =7.5 | |
PHP-Nuke | =7.2 | |
PHP-Nuke | =7.0_final | |
PHP-Nuke | =6.5_rc2 | |
PHP-Nuke | =7.3 | |
PHP-Nuke | =6.5_rc3 | |
PHP-Nuke | =7.6 | |
PHP-Nuke | =6.0 | |
PHP-Nuke | =6.5_final | |
PHP-Nuke | =6.7 | |
PHP-Nuke | =6.6 | |
PHP-Nuke | =6.9 | |
PHP-Nuke | =7.1 | |
PHP-Nuke | =6.5_rc1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2005-0999 is classified as a high severity SQL injection vulnerability.
To fix CVE-2005-0999, upgrade to a version of PHP-Nuke that is not vulnerable, such as version 7.7 or later.
CVE-2005-0999 affects PHP-Nuke versions 6.x through 7.6.
Yes, CVE-2005-0999 can be exploited remotely by attackers to execute arbitrary SQL commands.
CVE-2005-0999 enables SQL injection attacks that can compromise database integrity and confidentiality.