{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2004-02-10T00:00:00", "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2017-07-10T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "9630", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/9630"}, {"name": "20040210 [SCAN Associates Sdn Bhd Security Advisory] PHPNuke 6.9 > and below SQL Injection in multiple module", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://marc.info/?l=bugtraq&m=107643348117646&w=2"}, {"name": "phpnuke-modules-sql-injection(15115)", "tags": ["vdb-entry", "x_refsource_XF"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15115"}, {"tags": ["x_refsource_MISC"], "url": "http://www.scan-associates.net/papers/phpnuke69.txt"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2004-0269", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "9630", "refsource": "BID", "url": "http://www.securityfocus.com/bid/9630"}, {"name": "20040210 [SCAN Associates Sdn Bhd Security Advisory] PHPNuke 6.9 > and below SQL Injection in multiple module", "refsource": "BUGTRAQ", "url": "http://marc.info/?l=bugtraq&m=107643348117646&w=2"}, {"name": "phpnuke-modules-sql-injection(15115)", "refsource": "XF", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15115"}, {"name": "http://www.scan-associates.net/papers/phpnuke69.txt", "refsource": "MISC", "url": "http://www.scan-associates.net/papers/phpnuke69.txt"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T00:10:03.855Z"}, "title": "CVE Program Container", "references": [{"name": "9630", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/9630"}, {"name": "20040210 [SCAN Associates Sdn Bhd Security Advisory] PHPNuke 6.9 > and below SQL Injection in multiple module", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://marc.info/?l=bugtraq&m=107643348117646&w=2"}, {"name": "phpnuke-modules-sql-injection(15115)", "tags": ["vdb-entry", "x_refsource_XF", "x_transferred"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15115"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://www.scan-associates.net/papers/phpnuke69.txt"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2004-0269", "datePublished": "2004-03-18T05:00:00", "dateReserved": "2004-03-17T00:00:00", "dateUpdated": "2024-08-08T00:10:03.855Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "1A9E1DB3-F0A2-4BD8-9D9D-53CA07B50ACB", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:2.5:*:*:*:*:*:*:*", "matchCriteriaId": "A7200662-F3B7-4755-8887-3BEEEDB469F2", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:3.0:*:*:*:*:*:*:*", "matchCriteriaId": "4CB52E20-9A87-4CE4-9E75-B0833F083845", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:4.0:*:*:*:*:*:*:*", "matchCriteriaId": "4E87A3E6-935F-4569-8B5F-70A88442FD4C", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:4.3:*:*:*:*:*:*:*", "matchCriteriaId": "D7E4C570-648F-48EF-B965-16C5878A0CBA", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:4.4:*:*:*:*:*:*:*", "matchCriteriaId": "EC3CBB92-6A11-4B5B-A910-B0287AB12846", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:4.4.1a:*:*:*:*:*:*:*", "matchCriteriaId": "4C17255B-64E1-4DFF-8C21-8BB1D78A5256", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*", "matchCriteriaId": "93B755A9-694E-49FA-9068-353203AF9965", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:*:*:*:*:*:*:*", "matchCriteriaId": "CA0B88AD-CACF-4E48-A4B1-313FFE32D058", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.1:*:*:*:*:*:*:*", "matchCriteriaId": "FF4C3F85-A23C-40B9-9B0F-564E7C254AA5", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.2:*:*:*:*:*:*:*", "matchCriteriaId": "4EAF55C4-F0A7-4A36-B203-83670D58483F", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.2a:*:*:*:*:*:*:*", "matchCriteriaId": "E3ED3BFC-C8CF-4537-832C-0D00400AC064", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.3.1:*:*:*:*:*:*:*", "matchCriteriaId": "C94B62CA-8D34-4B37-8748-1FE64F0299DF", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.4:*:*:*:*:*:*:*", "matchCriteriaId": "8720AE61-41C7-4EA8-8C01-81AC0BFACBCC", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.5:*:*:*:*:*:*:*", "matchCriteriaId": "2F6E1577-6E50-49E2-B968-8C2AA924142F", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:5.6:*:*:*:*:*:*:*", "matchCriteriaId": "CA9AE983-B6FF-4686-BDB3-E6B12D4E853E", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*", "matchCriteriaId": "91CC84AB-0BA6-45BE-9DE8-7243FBF00EB8", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*", "matchCriteriaId": "23264211-2992-4222-9B96-5ABEE1332C5B", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*", "matchCriteriaId": "B7F76C32-E24D-4B62-88CE-2D23F457573B", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*", "matchCriteriaId": "F90A3E1F-0371-45C0-A165-55D94A62C3DA", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*", "matchCriteriaId": "F80A5D98-6C48-461F-8B96-BD32A96CDCA1", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*", "matchCriteriaId": "92F4E55E-4424-4EC8-8013-9A0FFE7D3658", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*", "matchCriteriaId": "9DA61C83-9CE0-4B5E-A8A1-B9C5C9D74084", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*", "matchCriteriaId": "8B13CCAA-839F-406D-A7F3-975B4780425A", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*", "matchCriteriaId": "1D375197-0087-479C-991B-964FB83644F4", "vulnerable": true}, {"criteria": "cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*", "matchCriteriaId": "70F6320E-314D-4A8F-BC9A-29F730035C68", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module."}, {"lang": "es", "value": "Vulnerabilidad de inyecci\u00f3n de SQL en PHP-Nuke 6.9 y anteriores, y posiblemente 6.x, permite a atacantes remotos inyectar c\u00f3digo SQL de su elecci\u00f3n y obtener informaci\u00f3n sensible mediante (1) la variable category en el m\u00f3dulo Search. o (2) la variable admin en el m\u00f3dulo Web_Links."}], "id": "CVE-2004-0269", "lastModified": "2024-11-20T23:48:09.497", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 6.4, "confidentialityImpact": "PARTIAL", "integrityImpact": "PARTIAL", "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 4.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2004-11-23T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://marc.info/?l=bugtraq&m=107643348117646&w=2"}, {"source": "cve@mitre.org", "url": "http://www.scan-associates.net/papers/phpnuke69.txt"}, {"source": "cve@mitre.org", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/9630"}, {"source": "cve@mitre.org", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15115"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://marc.info/?l=bugtraq&m=107643348117646&w=2"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.scan-associates.net/papers/phpnuke69.txt"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Patch", "Vendor Advisory"], "url": "http://www.securityfocus.com/bid/9630"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/15115"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}