← Back

CVE-2004-2354

nvd nist
Published: Dec 31, 2004Modified: Apr 16, 2026

JSON object

Loading...
6.8
Vector
AV:N/AC:M/Au:N/C:P/I:P/A:P
Exploitability: 8.6 / Impact: 6.4
Source: NVD

Description

SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter to modules.php, which can also facilitate cross-site scripting (XSS) attacks when MySQL errors are triggered.

Affected (10)

Francisco Burzi
1 product
Php Nuke
Warpspeed
1 product
4nguestbook
Configuration A
10 vulnerable
Vulnerable SoftwareAffected Versions
Francisco Burzi
Php Nuke
Version 6.5
Php Nuke
Version 6.5_beta1
Php Nuke
Version 6.5_final
Php Nuke
Version 6.5_rc1
Php Nuke
Version 6.5_rc2
Php Nuke
Version 6.5_rc3
Php Nuke
Version 6.6
Php Nuke
Version 6.7
Php Nuke
Version 6.9
4nguestbook
Version 0.92

References (4)

Source: cve@mitre.org
ExploitVendor Advisory
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
ExploitVendor Advisory
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.