Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2002-2032

Quick assessment

Affected
n/a n/a
Exploitation
High exploitation probability; assess promptly
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

PHP-Nuke是一个网站创建和管理工具，它可以用很多数据库软件作为后端，比如MySQL、PostgreSQL、mSQL、Interbase、Sybase等。 PHP-Nuke在脚本中的调试信息处理存在问题，可以使远程攻击者得到数据库查询请求的一些敏感信息。 sql_layer.php脚本有一个调试功能可以被攻击者利用来获得所有PHP-Nuke的查询请求信息。对调试功能的访问并不只限于管理员。远程攻击者可能利用这个漏洞得到数据库相关的敏感信息并进一步攻击数据库所在的Web服务器。

AI Predicted 5.3 Difficulty: Easy EPSS 5.85% · P93

Public Exploits 1

ExploitDB · 1 EDB-21233 [webapps]
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2002-2032

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote attackers to gain SQL query information by setting the sql_debug parameter to (1) index.php and (2) modules.php.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
PHP-Nuke SQL_Debug调试信息泄露漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
PHP-Nuke是一个网站创建和管理工具，它可以用很多数据库软件作为后端，比如MySQL、PostgreSQL、mSQL、Interbase、Sybase等。 PHP-Nuke在脚本中的调试信息处理存在问题，可以使远程攻击者得到数据库查询请求的一些敏感信息。 sql_layer.php脚本有一个调试功能可以被攻击者利用来获得所有PHP-Nuke的查询请求信息。对调试功能的访问并不只限于管理员。远程攻击者可能利用这个漏洞得到数据库相关的敏感信息并进一步攻击数据库所在的Web服务器。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2002-2032

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2002-2032

请登录查看更多情报信息。

Vendor Advisories for CVE-2002-2032 (1)

Other References for CVE-2002-2032 (1)

Same Patch Batch · n/a · 2005-07-14 · 176 CVEs total

CVE-2002-2031 Microsoft Internet Explorer 安全漏洞
CVE-2002-2021 Burning Board跨站脚本执行漏洞
CVE-2002-2022 Kaffe OpenVM NoClassDefFoundError格式字符串漏洞
CVE-2002-2023 Shingo beep2任意文件读取漏洞
CVE-2002-2024 Horde IMP 2.2.7存在路径泄露漏洞
CVE-2002-2025 Lotus Domino MS-DOS设备文件名拒绝服务攻击漏洞
CVE-2002-2026 BrowseFTP Client缓冲区溢出漏洞
CVE-2002-2027 Database of our owlish Wisdom 安全漏洞
CVE-2002-2028 微软Windows NT不准确的登录日志漏洞
CVE-2002-2029 Apache Win32 PHP.EXE远程文件泄露漏洞
CVE-2002-2030 SQLData Enterprise Server缓冲区溢出漏洞
CVE-2002-2037 Solaris漏洞威胁Cisco Media Gateway Controller的安全
CVE-2002-2042 QNX 'ptrace()'任意进程修改漏洞
CVE-2002-2041 QNX RTOS PKG-Installer缓冲区溢出漏洞
CVE-2002-2040 QNX RTOS phgrafx特权提升漏洞
CVE-2002-2039 QNX RTOS su密码哈希泄露漏洞
CVE-2002-2038 新一代的POSIX线程共享内存服务拒绝漏洞
CVE-2002-2035 RealityScape MyLoginSQL注入漏洞
CVE-2002-2033 Faqmanager.cgi NULL字符泄露任意文件漏洞
CVE-2002-2034 John Hardin Procmail Email Sanitizer分段Mime识别漏洞

Showing top 20 of 176 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2002-2032

No comments yet

Leave a comment