CVE-2004-2297

PHP-Nuke 6.0-7.3 - Denial of Service via Reviews Module Score Parameter

Title source: llm

Exploitation Summary

EIP tracks 1 public exploit for CVE-2004-2297. PoCs published by Janek Vind.

AI-analyzed exploit summary This is a writeup detailing multiple vulnerabilities in PHP-Nuke, including XSS, SQL injection, and DoS. It provides example URLs demonstrating the vulnerabilities but does not include executable exploit code.

Description

The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large, out-of-range score parameter.

Exploits (1)

exploitdb WRITEUP VERIFIED

by Janek Vind · textwebappsphp

https://www.exploit-db.com/exploits/24193

View Code ZIP pw:eip

This is a writeup detailing multiple vulnerabilities in PHP-Nuke, including XSS, SQL injection, and DoS. It provides example URLs demonstrating the vulnerabilities but does not include executable exploit code.

Classification

Writeup 90%

Attack Type

Xss | Sqli | Dos

Complexity

Trivial

Reliability

Theoretical

Target: PHP-Nuke 7.2, 7.3

No auth needed

Prerequisites: Access to the target PHP-Nuke instance

MITRE ATT&CK