Vulnerabilities > CVE-2004-2008 - Input Validation vulnerability in Adam Webb NukeJokes Module For PHP-Nuke
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
PARTIAL Availability impact
PARTIAL Summary
SQL injection vulnerability in modules.php in NukeJokes 1.7 and 2 Beta allows remote attackers to execute arbitrary SQL via the jokeid parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 2 |
Exploit-Db
description | Adam Webb NukeJokes 1.7/2.0 Module modules.php jokeid Parameter SQL Injection. CVE-2004-2008. Webapps exploit for php platform |
id | EDB-ID:24100 |
last seen | 2016-02-02 |
modified | 2004-05-08 |
published | 2004-05-08 |
reporter | Janek Vind |
source | https://www.exploit-db.com/download/24100/ |
title | Adam Webb NukeJokes 1.7/2.0 Module modules.php jokeid Parameter SQL Injection |