CVE-2004-0266 | SynScan

Vulnerability Database

289,689

Total vulnerabilities in the database

CVE-2004-0266

SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the administrator password via the c_mid parameter.

Published: Nov 23, 2004
Updated: Apr 13, 2023
CVE: CVE-2004-0266
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5
AV:N/AC:L/Au:N/C:P/I:N/A:N

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
francisco_burzi / php-nuke	6.5_beta1	6.5_beta1.x
francisco_burzi / php-nuke	6.5	6.5.x
francisco_burzi / php-nuke	7.0	7.0.x
francisco_burzi / php-nuke	7.0_final	7.0_final.x
francisco_burzi / php-nuke	6.5_rc2	6.5_rc2.x
francisco_burzi / php-nuke	6.5_rc3	6.5_rc3.x
francisco_burzi / php-nuke	6.0	6.0.x
francisco_burzi / php-nuke	6.5_final	6.5_final.x
francisco_burzi / php-nuke	6.7	6.7.x
francisco_burzi / php-nuke	6.6	6.6.x
francisco_burzi / php-nuke	6.9	6.9.x
francisco_burzi / php-nuke	7.1	7.1.x
francisco_burzi / php-nuke	6.5_rc1	6.5_rc1.x