Security Advisory

CVE-2001-1025

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2002-02-02 05:00:00

Last updated 2024-08-08 04:44:06

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php.

← Browse all CVEs View on cve.org ↗