Unrated severityNVD Advisory· Published Aug 31, 2001· Updated Apr 16, 2026

CVE-2001-1025

Description

PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php.

Affected products

PHP-Nuke/PHP Nuke2 versions
cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:francisco_burzi:php-nuke:5.0:*:*:*:*:*:*:*
- cpe:2.3:a:francisco_burzi:php-nuke:5.0.1:*:*:*:*:*:*:*

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

archives.neohapsis.com/archives/vulnwatch/2001-q3/0019.htmlnvdExploitVendor Advisory
www.securityfocus.com/bid/3149nvdExploitVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000