CVE-2003-1210: Francisco Burzi PHP-Nuke

High severity, CVSS 7.5. EPSS: 5.4% chance of exploitation in the next 30 days.

Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.

Affected products

• Francisco Burzi PHP-Nuke: up to and including 6.5; version 6.5_beta1 only; version 6.5_final only; version 6.5_rc1 only; version 6.5_rc2 only; version 6.5_rc3 only

Published 2003-12-31. Last modified 2026-06-16.