Back

CVE-2004-1972

SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to execute arbitrary SQL code via the (1) clipid or (2) catid parameters in a viewclip, viewcat, or voteclip action.

Published: Apr 26, 2004 Modified: Jun 16, 2026

CVSS Metrics

Affected Products (1)

Vendor Product Version
francisco_burzi php-nuke 7.2

GitHub Security Advisory GHSA-j882-pgg3-j4m7

SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows...

Risk Scores

CVSS Score 7.5 / 10
EPSS Score 2.07%

Top 20% most likely to be exploited

Threat Score 30.6 / 100

Data Sources

NVD EPSS GitHub