Vulnerabilities > CVE-2004-2000

047910
CVSS 0.0 - NONE
Attack vector
UNKNOWN
Attack complexity
UNKNOWN
Privileges required
UNKNOWN
Confidentiality impact
UNKNOWN
Integrity impact
UNKNOWN
Availability impact
UNKNOWN
exploit available
NVD
Published: 2004-05-05
Updated: 2024-11-20

Summary

SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL via the (1) orderby or (2) sid parameters to modules.php.

Vulnerable Configurations

Part Description Count
Application
Francisco_Burzi
14

Exploit-Db

descriptionPHP-Nuke Downloads Module 'sid' Parameter SQL Injection Vulnerability. CVE-2004-2000. Webapps exploit for php platform
idEDB-ID:31283
last seen2016-02-03
modified2008-02-21
published2008-02-21
reporterS@BUN
sourcehttps://www.exploit-db.com/download/31283/
titlePHP-Nuke Downloads Module - 'sid' Parameter SQL Injection Vulnerability

References