CVE-2001-1025
10.0
CVSS v2.0 Base Score
2.77%
LOW RiskEPSS (84th percentile)
NVD-CWE-Other
PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable when calling any scripts that do not already define the prefix variable (e.g., by including mainfile.php), such as article.php.
Published: 8/31/2001
Modified: 6/16/2026
Vulnerability Summary
CVSS v2 Score
10
AV:N/AC:L/Au:N/C:C/I:C/A:C
EPSS Score (Exploitation Probability)
2.77%LOW Exploitation Risk
84th percentile
This vulnerability has a 2.77% probability of being exploited in the next 30 days, ranking higher than 84% of all scored CVEs.
CWE Classification
NVD-CWE-Other