Vulnerability Details CVE-2003-1435
SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search module.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 2.0%
CVSS Severity
CVSS v2 Score 7.5
References
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0246.html
- http://www.securityfocus.com/bid/6887
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11375
- http://archives.neohapsis.com/archives/bugtraq/2003-02/0246.html
- http://www.securityfocus.com/bid/6887
- https://exchange.xforce.ibmcloud.com/vulnerabilities/11375
Products affected by CVE-2003-1435
-
cpe:2.3:a:francisco_burzi:php-nuke:5.6
-
cpe:2.3:a:francisco_burzi:php-nuke:6.0