CVE-2008-0922 Information

Description

SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php.

Reference

http://www.securityfocus.com/bid/27933 https://www.exploit-db.com/exploits/5168