Vulnerability in Francisco Burzi Php-Nuke
CVE-2002-2032
sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote attackers to gain SQL query information by setting the sql_debug parameter to (1) index.php and (2) modules.php.
EPSS: 0.059 (92.4th percentile) — read the EPSS interpretation.
Affected products
- Francisco_burzi Php-nuke — versions 1.0, 2.5, 3.0
- N/a — versions n/a
References
- cve@mitre.org (Exploit, vdb-entry, x_refsource_BID)
- cve@mitre.org (URL Repurposed, Exploit, x_refsource_MISC)