FreeBSD VuXML: Documenting security issues in FreeBSD and the FreeBSD Ports Collection

CVE-2003-0279

This CVE name corresponds to:

Entered	Topic
2004-07-03	Several vulnerabilities found in PHPNuke

The following information is adapted from the Common Vulnerabilities and Exposures (CVE) project. CVE and the CVE logo are trademarks of The MITRE Corporation. CVE content is Copyright 2005, The MITRE Corporation.

CVE-2003-0279 at cve.mitre.org

Details

Type	Candidate
Name	CVE-2003-0279
Phase	Assigned(20030512)

Description

Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php.

References

Source	Reference
BUGTRAQ	20030512 Lot of SQL injection on PHP-Nuke 6.5 (secure weblog!)
BUGTRAQ	20030513 More and More SQL injection on PHP-Nuke 6.5.
BID	7558
BID	7588
XF	phpnuke-web-sql-injection(11984)