CVE-2005-0997

CVE-2005-0997 describes multiple SQL injection vulnerabilities within the Web_Links module of PHP-Nuke version 7.6. These flaws allow remote, unauthenticated attackers to execute arbitrary SQL commands by manipulating various parameters in functions like Add, modifylinkrequestS, viewlink, search, and MostPopular. With a CVSS score of 7.5, this vulnerability is considered highly severe due to its network-based attack vector, low attack complexity, and potential for full compromise of confidentiality, integrity, and availability. While not listed on CISA's KEV catalog and lacking active exploitation or significant community discussion, exploit code is publicly available via ExploitDB, indicating a potential for exploitation.