Back
CVE-2004-2056
SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute arbitrary SQL statements via the itemid parameter.
Published: Dec 31, 2004
Modified: Jun 16, 2026
CVSS Metrics
Affected Products (1)
| Vendor | Product | Version |
|---|---|---|
| nucleus_group | nucleus_cms | 3.01 |
GitHub Security Advisory GHSA-mhmg-w75c-4vrr
SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute...
References (6)
- http://marc.info/?l=bugtraq&m=109087144509299&w=2
- http://secunia.com/advisories/13136 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18002
- http://marc.info/?l=bugtraq&m=109087144509299&w=2
- http://secunia.com/advisories/13136 Patch
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18002
Risk Scores
CVSS Score
7.5 / 10
EPSS Score
1.23%
Top 34% most likely to be exploited
Threat Score
30.4 / 100
Data Sources
NVD
EPSS
GitHub