CVE-2003-1210

No fix known EPSS 5%

Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.

Published 2005-05-19 · CVE record · OSV

Products: francisco_burzi php-nuke