EUVD-2008-1315

Malware in sbrugna...

Sql injection

SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idcatg parameter in a ViewCatg action to modules.php...

CVE-2008-1308: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idcatg parameter in a ViewCatg action to modules.php...