CVE-2005-0997: francisco_burzi php-nuke
Vulnerability summary
CVE-2005-0997 is a high (CVSS 7.5) vulnerability in francisco_burzi php-nuke. EPSS estimates a 1.42% chance of exploitation in the next 30 days, higher than 72.5% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 07-04-2005PublishedVulnerability first disclosed.
- 07-08-2024Last modifiedVulnerability information updated.
Description
Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the email or url parameters in the Add function, (2) the url parameter in the modifylinkrequestS function, (3) the orderby or min parameters in the viewlink function, (4) the orderby, min, or show parameters in the search function, or (5) the ratenum parameter in the MostPopular function.
CVSS metrics
1 score · 1 source · 1 versionEPSS trend
Probability
1.42%
Chance of exploitation in the next 30 days
Percentile
73%
Versus all other CVEs
30-day change
0.00 pp
From 1.42% on 21-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundPHP-Nuke 7.6 Web_Links Module - Multiple SQL Injections
Maturity: poc
Weaknesses
CWE · root causeNo weakness data has been published for this record.
Affected systems
Francisco_burzi1 product
- php-nuke7.6
1 vendor · 1 product