CVE-2003-1210

Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.

CVSS v2.0

7.5 HIGHAV:N/AC:L/Au:N/C:P/I:P/A:P

EPSS

5.37% chance of exploitation in the next 30 days, 92th percentile

Published

2005-05-19

Updated

2024-08-08

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/22597

References

• CVE Record
• NVD entry

Related

• CVE-2003-1207
• CVE-2003-1213
• CVE-2003-1203
• CVE-2003-1216
• CVE-2003-1200
• CVE-2003-1219