CVE-2005-3304 - Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via (1) the username parameter in the Your Account page, (2) the url parameter in the Downloads module, and (3) the description parameter in the Web_Links module

Back Back to CVE browser

HIGH

Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via (1) the username parameter in the Your Account page, (2) the url parameter in the Downloads module, and (3) the description parameter in the Web_Links module

Published Oct 25, 2005

7.5

HIGH

CVSS 2.0

EPSS 5.63%

Description

Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via (1) the username parameter in the Your Account page, (2) the url parameter in the Downloads module, and (3) the description parameter in the Web_Links module.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (9)

http://marc.info/?l=bugtraq&m=113017049702436&w=2
mailing-listx_refsource_BUGTRAQ
http://rgod.altervista.org/phpnuke78sql.html
x_refsource_MISCExploitVendor Advisory
http://secunia.com/advisories/17315/
third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/20291
vdb-entryx_refsource_OSVDB
http://www.osvdb.org/20292
vdb-entryx_refsource_OSVDB
http://www.osvdb.org/20293
vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/15178
vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2005/2191
vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/22851
vdb-entryx_refsource_XF

Link	Providers	Tags
http://marc.info/?l=bugtraq&m=113017049702436&w=2		mailing-listx_refsource_BUGTRAQ
http://rgod.altervista.org/phpnuke78sql.html		x_refsource_MISCExploitVendor Advisory
http://secunia.com/advisories/17315/		third-party-advisoryx_refsource_SECUNIAVendor Advisory
http://www.osvdb.org/20291		vdb-entryx_refsource_OSVDB
http://www.osvdb.org/20292		vdb-entryx_refsource_OSVDB
http://www.osvdb.org/20293		vdb-entryx_refsource_OSVDB
http://www.securityfocus.com/bid/15178		vdb-entryx_refsource_BID
http://www.vupen.com/english/advisories/2005/2191		vdb-entryx_refsource_VUPEN
https://exchange.xforce.ibmcloud.com/vulnerabilities/22851		vdb-entryx_refsource_XF

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Oct 25, 2005

Updated Aug 7, 2024

Reserved Oct 26, 2005

Link CVE-2005-3304

CISA Vulnrichment

Updated n/a

NVD

Status Modified

Modified Jun 16, 2026

Link CVE-2005-3304

Red Hat

Severity n/a

Public date n/a

Links CVE-2005-3304