Lucene search

K
cveMitreCVE-2003-0279
HistoryJun 16, 2003 - 4:00 a.m.

CVE-2003-0279

2003-06-1604:00:00
mitre
web.nvd.nist.gov
25
php-nuke
web_links
sql injection
remote attack
information theft

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

AI Score

7.5

Confidence

Low

EPSS

0.004

Percentile

73.0%

Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php.

Affected configurations

Nvd
Node
francisco_burziphp-nukeMatch5.0
OR
francisco_burziphp-nukeMatch6.0
VendorProductVersionCPE
francisco_burziphp-nuke5.0cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*
francisco_burziphp-nuke6.0cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*

CVSS2

2.6

Attack Vector

NETWORK

Attack Complexity

HIGH

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:N/AC:H/Au:N/C:P/I:N/A:N

AI Score

7.5

Confidence

Low

EPSS

0.004

Percentile

73.0%