Vulnerability Report

CVE-2010-5083

Title: Phpnuke Web Links Module Injection (SQLi/OSi)

SQLi

Proof Of Concept

PoC Available for CVE-2010-5083

CWE Category CWE-89
Published Date Feb 14, 2012
Modified Date Jun 16, 2026
Exploit Status Available
Score 7.5 CVSS v2.0
Exploit Probability (EPSS)
1.10%

Vulnerability Summary

CVE-2010-5083: SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php.

Impacted Vendors

F
francisco_burzi 1
P
phpnuke 2
P
php-nuke 1

Reference Links

http://www.exploit-db.com/exploits/14589 http://www.itsecteam.com/en/vulnerabilities/vulnerability58.htm https://exchange.xforce.ibmcloud.com/vulnerabilities/61012 http://www.exploit-db.com/exploits/14589 http://www.itsecteam.com/en/vulnerabilities/vulnerability58.htm https://exchange.xforce.ibmcloud.com/vulnerabilities/61012
CVSS v2.0
Source Entity [email protected]
Severity HIGH
7.5
Access Vector
N/A
Authentication
N/A
RAW VECTOR AV:N/AC:L/Au:N/C:P/I:P/A:P

Associated Attack Patterns (CAPEC)

Total: Patterns

CVE-2010-5083 Exploits & PoCs (Proof Of Concept)

Exploit-DB https://www.exploit-db.com/exploits/14589
View Code
MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data updated via NVD.

MODIFIED

Vulnerability data or affected products updated.

PUBLISHED

Vulnerability first announced in NVD.

Attack Vector Matrix

Access Vector N/A
Complexity N/A
Privileges N/A
Interaction NONE
CVSS Vector String AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected Stack

No specific products linked.