CVE:CVE-2004-2354
CNNVD:CNNVD-200412-1038
PHP-Nuke 6.5和6.9版本的4nGuestbook 0.92存在SQL注入漏洞。远程攻击者借助modules.php模块的项参数修改SQL语句，该漏洞也可以在MySQL错误触发时促进跨站点脚本（XSS）攻击。
solution:Upgrade francisco_burzi php-nuke to a higher version than 6.5,6.5_beta1,6.5_final,6.5_rc1,6.5_rc2,6.5_rc3,6.6,6.7,6.9,and avoid the version 6.5,6.5_beta1,6.5_final,6.5_rc1,6.5_rc2,6.5_rc3,6.6,6.7,6.9; Upgrade warpspeed 4nguestbook to a higher version than 0.92,and avoid the version 0.92