Vulnerability Details CVE-2003-1210
Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 3.1%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html
- http://www.securityfocus.com/bid/7588
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11984
- http://archives.neohapsis.com/archives/bugtraq/2003-05/0147.html
- http://www.securityfocus.com/bid/7588
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11984
Products affected by CVE-2003-1210
-
cpe:2.3:a:francisco_burzi:php-nuke:*
-
cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1
-
cpe:2.3:a:francisco_burzi:php-nuke:6.5_final
-
cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1
-
cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2
-
cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3