Description
Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote attackers to steal sensitive information via numeric fields, as demonstrated using (1) the viewlink function and cid parameter, or (2) index.php.
References
- 20030512 Lot of SQL injection on PHP-Nuke 6.5 (secure weblog!) mailing-list
- 7588 vdb-entry
- 7558 vdb-entry
- 20030513 More and More SQL injection on PHP-Nuke 6.5. mailing-list
- phpnuke-web-sql-injection(11984) vdb-entry