Back
CVE-2004-0269
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.
Published: Nov 23, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (26)
| Vendor | Product | Version |
|---|---|---|
| francisco_burzi | php-nuke | 1.0 |
| francisco_burzi | php-nuke | 2.5 |
| francisco_burzi | php-nuke | 3.0 |
| francisco_burzi | php-nuke | 4.0 |
| francisco_burzi | php-nuke | 4.3 |
| francisco_burzi | php-nuke | 4.4 |
| francisco_burzi | php-nuke | 4.4.1a |
| francisco_burzi | php-nuke | 5.0 |
| francisco_burzi | php-nuke | 5.0.1 |
| francisco_burzi | php-nuke | 5.1 |
| francisco_burzi | php-nuke | 5.2 |
| francisco_burzi | php-nuke | 5.2a |
| francisco_burzi | php-nuke | 5.3.1 |
| francisco_burzi | php-nuke | 5.4 |
| francisco_burzi | php-nuke | 5.5 |
| francisco_burzi | php-nuke | 5.6 |
| francisco_burzi | php-nuke | 6.0 |
| francisco_burzi | php-nuke | 6.5 |
| francisco_burzi | php-nuke | 6.5_beta1 |
| francisco_burzi | php-nuke | 6.5_final |
…and 6 more
GitHub Security Advisory GHSA-xfcm-6xgr-cx4p
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote...
References (8)
- http://marc.info/?l=bugtraq&m=107643348117646&w=2
- http://www.scan-associates.net/papers/phpnuke69.txt
- http://www.securityfocus.com/bid/9630 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15115
- http://marc.info/?l=bugtraq&m=107643348117646&w=2
- http://www.scan-associates.net/papers/phpnuke69.txt
- http://www.securityfocus.com/bid/9630 Exploit, Patch, Vendor Advisory
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15115
Risk Scores
CVSS Score
6.4 / 10
EPSS Score
8.09%
Top 6% most likely to be exploited
Threat Score
28 / 100
Data Sources
NVD
EPSS
GitHub