Exploitation Summary
EIP tracks 1 public exploit for CVE-2004-1932. PoCs published by iko94.
AI-analyzed exploit summary This exploit targets a SQL injection vulnerability in PHP-Nuke's admin.php. It attempts to inject a UNION-based SQL payload to manipulate message data and potentially escalate privileges by setting 'admin' to a malicious value.
Description
SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL code and create an administrator account via base64-encoded SQL in the admin parameter.
Exploits (1)
This exploit targets a SQL injection vulnerability in PHP-Nuke's admin.php. It attempts to inject a UNION-based SQL payload to manipulate message data and potentially escalate privileges by setting 'admin' to a malicious value.