Unscored CVE-2008-6866 EUVD-2008-6826GHSA-x6f2-59xh-8mrv

SQL injection vulnerability in modules.php in the Current_Issue module for PHP-Nuke allows remote attackers to execute arbitrary SQL comman…

Published Jul 14, 2009 · Updated Aug 7, 2024 · Assigned by mitre

Description

SQL injection vulnerability in modules.php in the Current_Issue module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a summary action.

References

currentissues-modules-sql-injection(51736) vdb-entry
51889 vdb-entry
20081030 PHP-Nuke Module Current_Issue (summary&id) Remote SQL injection Vulnerability mailing-list