CVE-2001-1025 PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including....
HighCVSS 10.0
EPSS 2.8%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| francisco burzi php-nuke | = 5.0 | No fix listed |
| francisco burzi php-nuke | = 5.0.1 | No fix listed |
References
- 20010803 [VulnWatch] 3 phpnuke bugs (2 possibly lead to admin privs) exploit mailing-list vendor-advisory
- 3149 exploit vdb-entry vendor-advisory