Vulnerabilities > CVE-2004-2000

CVSS 0.0 - NONE

Attack vector

UNKNOWN

Attack complexity

UNKNOWN

Privileges required

UNKNOWN

Confidentiality impact

UNKNOWN

Integrity impact

UNKNOWN

Availability impact

UNKNOWN

exploit available

NVD

Published: 2004-05-05

Updated: 2024-11-20

Summary

SQL injection vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL via the (1) orderby or (2) sid parameters to modules.php.

Vulnerable Configurations

Part	Description	Count
Application	Francisco_Burzi Francisco Burzi PHP Nuke 6.5_Beta1 Francisco Burzi PHP Nuke 6.5 Francisco Burzi PHP Nuke 7.0 Francisco Burzi PHP Nuke 7.2 Francisco Burzi PHP Nuke 7.0_Final Francisco Burzi PHP Nuke 6.5_Rc2 Francisco Burzi PHP Nuke 6.5_Rc3 Francisco Burzi PHP Nuke 6.0 Francisco Burzi PHP Nuke 6.7 Francisco Burzi PHP Nuke 6.9 Francisco Burzi PHP Nuke 6.5_Final Francisco Burzi PHP Nuke 6.5_Rc1 Francisco Burzi PHP Nuke 7.1 Francisco Burzi PHP Nuke 6.6	14

Exploit-Db

description	PHP-Nuke Downloads Module 'sid' Parameter SQL Injection Vulnerability. CVE-2004-2000. Webapps exploit for php platform
id	EDB-ID:31283
last seen	2016-02-03
modified	2008-02-21
published	2008-02-21
reporter	S@BUN
source	https://www.exploit-db.com/download/31283/
title	PHP-Nuke Downloads Module - 'sid' Parameter SQL Injection Vulnerability

Vulnerabilities > CVE-2004-2000 {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"CVE-2004-2000"}]}

Summary

Vulnerable Configurations

Exploit-Db

References

Vulnerabilities > CVE-2004-2000