CVE-2003-0279: Francisco Burzi PHP-Nuke

Low severity, CVSS 2.6. EPSS: 1.2% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php.

Affected products

• Francisco Burzi PHP-Nuke: version 5.0 only; version 6.0 only

Published 2003-06-16. Last modified 2026-06-16.