QwikSec

Security Database

CVE

CWE

Training

CVE-2003-1340

Published: Oct 1, 2007

Modified: Aug 8, 2024

PUBLISHED

Description

Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to execute arbitrary SQL commands via (1) a uid (user) cookie to modules.php; and allow remote attackers to execute arbitrary SQL commands via an aid (admin) cookie to the Web_Links module in a (2) viewlink, (3) MostPopular, or (4) NewLinksDate action, different vectors than CVE-2003-0279.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20030530 Php-Nuke:users and admins password hashes vulnerability

mailing-list

x_refsource_BUGTRAQ

third-party-advisory

x_refsource_SREASON

20070927 Re: [waraxe-2007-SA#056] - Another Sql Injection in NukeSentinel 2.5.11

mailing-list

x_refsource_BUGTRAQ

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.