CVE-2005-0999: SQL Injection
Published Apr 7, 2005
·Updated
SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylang parameter.
Affected Software
18 affected components
Francisco Burzi PHP-Nuke=6.5_beta1
Francisco Burzi PHP-Nuke=6.5
Francisco Burzi PHP-Nuke=7.0
Francisco Burzi PHP-Nuke=7.4
Francisco Burzi PHP-Nuke=7.5
Francisco Burzi PHP-Nuke=7.2
Francisco Burzi PHP-Nuke=7.0_final
Francisco Burzi PHP-Nuke=6.5_rc2
Francisco Burzi PHP-Nuke=7.3
Francisco Burzi PHP-Nuke=6.5_rc3
Francisco Burzi PHP-Nuke=7.6
Francisco Burzi PHP-Nuke=6.0
Francisco Burzi PHP-Nuke=6.5_final
Francisco Burzi PHP-Nuke=6.7
Francisco Burzi PHP-Nuke=6.6
Francisco Burzi PHP-Nuke=6.9
Francisco Burzi PHP-Nuke=7.1
Francisco Burzi PHP-Nuke=6.5_rc1
Event History
Apr 7, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-0999?
CVE-2005-0999 is classified as a high severity SQL injection vulnerability.
2
How do I fix CVE-2005-0999?
To fix CVE-2005-0999, upgrade to a version of PHP-Nuke that is not vulnerable, such as version 7.7 or later.
3
What software versions are affected by CVE-2005-0999?
CVE-2005-0999 affects PHP-Nuke versions 6.x through 7.6.
4
Can CVE-2005-0999 be exploited remotely?
Yes, CVE-2005-0999 can be exploited remotely by attackers to execute arbitrary SQL commands.
5
What type of attack does CVE-2005-0999 enable?
CVE-2005-0999 enables SQL injection attacks that can compromise database integrity and confidentiality.