The vulnerability of the addtotopics.php script implementation in the built-in News module of the NukeViet content management system allows a violator to execute arbitrary SQL code.

The vulnerability of the addtotopics.php script, part of the built-in News module in the NukeViet content management system, relates to the lack of protective measures for the SQL query structure. Exploiting this vulnerability allows a malicious actor to execute arbitrary SQL code through the...