Vulnerability in Francisco Burzi Php-Nuke

CVE-2004-2354

SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter to modules.php, which can also facilitate cross-site scripting (XSS) attacks when MySQL errors are triggered.

EPSS: 0.015 (71.4th percentile) — read the EPSS interpretation.

Affected products

Francisco_burzi Php-nuke — versions 6.5, 6.5_beta1, 6.5_final
Warpspeed 4nguestbook — versions 0.92
N/a — versions n/a

References

cve@mitre.org (vdb-entry, x_refsource_XF)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)