Unscored CVE-2007-1450 EUVD-2007-1444GHSA-m4ph-g7g5-m39f

SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the To…

Published Mar 14, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter.

References

20070310 PHP-Nuke <= 8.0 Cookie Manipulation (lang) mailing-list
22909 vdb-entry