Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1929. PoCs published by waraxe.
AI-analyzed exploit summary This exploit demonstrates SQL injection vulnerabilities in PHP-Nuke 7.1, allowing an attacker to read arbitrary private messages or create an arbitrary administrator account by manipulating user-supplied input in the URL parameters.
Description
SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter.
Exploits (1)
This exploit demonstrates SQL injection vulnerabilities in PHP-Nuke 7.1, allowing an attacker to read arbitrary private messages or create an arbitrary administrator account by manipulating user-supplied input in the URL parameters.