CVE-2004-0269
PHP-Nuke <= 6.9 - SQL Injection via Search Category or Web_Links Admin Parameter
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2004-0269. PoCs published by pokleyzz, Albert Puigsech Galicia.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in PHPNuke 6.x and 5.x by manipulating the 'category' parameter in the search module to extract the admin password hash. It uses a brute-force approach to retrieve the hash character by character via ASCII values.
Description
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.
Exploits (2)
This exploit targets a SQL injection vulnerability in PHPNuke 6.x and 5.x by manipulating the 'category' parameter in the search module to extract the admin password hash. It uses a brute-force approach to retrieve the hash character by character via ASCII values.
The writeup describes a SQL injection vulnerability in the Web_Links module of PHPNuke, allowing remote attackers to inject arbitrary SQL code via the 'cid' parameter. No actual exploit code is provided, only a description and example URL.