CVE-2005-0999

PHP-Nuke <7.6 - SQL Injection

Title source: llm

Description

SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylang parameter.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Fabrizi Andrea · bashwebappsphp
https://www.exploit-db.com/exploits/921

Scores

EPSS 0.0002
EPSS Percentile 5.0%

Details

Status published
Products (18)
francisco_burzi/php-nuke 6.0
francisco_burzi/php-nuke 6.5
francisco_burzi/php-nuke 6.5_beta1
francisco_burzi/php-nuke 6.5_final
francisco_burzi/php-nuke 6.5_rc1
francisco_burzi/php-nuke 6.5_rc2
francisco_burzi/php-nuke 6.5_rc3
francisco_burzi/php-nuke 6.6
francisco_burzi/php-nuke 6.7
francisco_burzi/php-nuke 6.9
... and 8 more
Published May 02, 2005
Tracked Since Feb 18, 2026