NukeViet News Module SQL Injection

The vulnerability of the addtotopics.php script, part of the built-in News module in the NukeViet content management system, relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code through the...