CVE-2008-6779 Information

Description

SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showcontent action to modules.php.

Reference

http://packetstormsecurity.org/0810-exploits/phpnukesarkilar-sql.txt http://www.securityfocus.com/bid/31830 https://exchange.xforce.ibmcloud.com/vulnerabilities/45992

Share on: