Unscored CVE-2008-6865 EUVD-2008-6825GHSA-chpw-67h6-9xfw

SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands…

Published Jul 14, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action.

References

sectionsnew-modules-sql-injection(51735) vdb-entry
20081030 PHP-Nuke Module Sectionsnew (printpage&artid) Remote SQL injection Vulnerability mailing-list
51890 vdb-entry