CVE-2008-0922 – PHP-Nuke Manuales SQL Injection

Description

SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php.


Vulnerability Information

  • Product / Framework: Php-nuke
  • Vendor Domain: sourceforge.net
  • Vulnerability Type: SQL injection
  • CVE Details: View Full CVE Details →