Vulnerability Details CVE-2001-1025
PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 22.7%
CVSS Severity
CVSS v2 Score 10.0
References
Products affected by CVE-2001-1025
-
cpe:2.3:a:francisco_burzi:php-nuke:5.0
-
cpe:2.3:a:francisco_burzi:php-nuke:5.0.1