Unrated severityNVD Advisory· Published Oct 26, 2005· Updated Jun 16, 2026

CVE-2005-3304

Description

Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via (1) the username parameter in the Your Account page, (2) the url parameter in the Downloads module, and (3) the description parameter in the Web_Links module.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PHP-Nuke/PHP Nuke2 versions
cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*
- (no CPE)range: =7.8

Patches

Vulnerability mechanics

References

rgod.altervista.org/phpnuke78sql.htmlnvdExploitVendor Advisory
secunia.com/advisories/17315/nvdVendor Advisory
marc.infonvd
www.osvdb.org/20291nvd
www.osvdb.org/20292nvd
www.osvdb.org/20293nvd
www.securityfocus.com/bid/15178nvd
www.vupen.com/english/advisories/2005/2191nvd
exchange.xforce.ibmcloud.com/vulnerabilities/22851nvd

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.005
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000