CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-1932

SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL code and create an administrator account via base64-encoded SQL in the admin parameter.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.0

EPSS Ranking 3.7%

CVSS Severity

CVSS v2 Score 7.5

References

Products affected by CVE-2004-1932

Francisco Burzi » Php-Nuke » Version: 6.0

cpe:2.3:a:francisco_burzi:php-nuke:6.0
Francisco Burzi » Php-Nuke » Version: 6.5

cpe:2.3:a:francisco_burzi:php-nuke:6.5
Francisco Burzi » Php-Nuke » Version: 6.5_beta1

cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1
Francisco Burzi » Php-Nuke » Version: 6.5_final

cpe:2.3:a:francisco_burzi:php-nuke:6.5_final
Francisco Burzi » Php-Nuke » Version: 6.5_rc1

cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1
Francisco Burzi » Php-Nuke » Version: 6.5_rc2

cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2
Francisco Burzi » Php-Nuke » Version: 6.5_rc3

cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3
Francisco Burzi » Php-Nuke » Version: 6.6

cpe:2.3:a:francisco_burzi:php-nuke:6.6
Francisco Burzi » Php-Nuke » Version: 6.7

cpe:2.3:a:francisco_burzi:php-nuke:6.7
Francisco Burzi » Php-Nuke » Version: 6.9

cpe:2.3:a:francisco_burzi:php-nuke:6.9
Francisco Burzi » Php-Nuke » Version: 7.0

cpe:2.3:a:francisco_burzi:php-nuke:7.0
Francisco Burzi » Php-Nuke » Version: 7.0_final

cpe:2.3:a:francisco_burzi:php-nuke:7.0_final
Francisco Burzi » Php-Nuke » Version: 7.1

cpe:2.3:a:francisco_burzi:php-nuke:7.1
Francisco Burzi » Php-Nuke » Version: 7.2

cpe:2.3:a:francisco_burzi:php-nuke:7.2

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2004-1932

Products

Pricing

Contact Us