CVE-2004-1929

SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter.

Published: Apr 13, 2004
Updated: Apr 13, 2023
CVE: CVE-2004-1929
Severity: High
Exploit:

CVSS v2:

Severity: High
Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
francisco_burzi / php-nuke	6.5_beta1	6.5_beta1.x
francisco_burzi / php-nuke	6.5	6.5.x
francisco_burzi / php-nuke	7.0	7.0.x
francisco_burzi / php-nuke	7.2	7.2.x
francisco_burzi / php-nuke	5.5	5.5.x
francisco_burzi / php-nuke	7.0_final	7.0_final.x
francisco_burzi / php-nuke	6.5_rc2	6.5_rc2.x
francisco_burzi / php-nuke	6.5_rc3	6.5_rc3.x
francisco_burzi / php-nuke	6.0	6.0.x
francisco_burzi / php-nuke	6.5_final	6.5_final.x
francisco_burzi / php-nuke	6.7	6.7.x
francisco_burzi / php-nuke	6.6	6.6.x
francisco_burzi / php-nuke	6.9	6.9.x
francisco_burzi / php-nuke	7.1	7.1.x
francisco_burzi / php-nuke	6.5_rc1	6.5_rc1.x

Vulnerability Database

289,697

CVE-2004-1929