CVE-2005-4715
francisco burzi php-nuke: no CVSS score yet. EPSS 3.8% chance of exploitation in the next 30 days.
Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) sid, and (3) pid parameters in a POST request, which bypasses security checks that are performed for GET requests.
- EPSS
- 3.8% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- francisco_burzi:php-nuke
References
- http://archives.neohapsis.com/archives/bugtraq/2005-09/0119.html
- http://archives.neohapsis.com/archives/bugtraq/2005-09/0167.html
- http://archives.neohapsis.com/archives/bugtraq/2005-09/0176.html
- http://archives.neohapsis.com/archives/bugtraq/2005-09/0226.html
- http://phpnuke.org/modules.php?name=News&file=article&sid=7434