Description
SQL injection vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to execute arbitrary SQL commands via the user_id parameter in the Your_Home functionality. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
References
- 18972 third-party-advisory
- ADV-2006-0687 vdb-entry
- 16774 vdb-entry
- phpnuke-yourhome-sql-injection(44730) vdb-entry
- 23432 vdb-entry