CVE-2008-0880

SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the pageid parameter...

CVE-2008-0880

The CVE-2008-0880 entry concerns an SQL injection in the EasyContent module for PHP-Nuke, exploitable via the page_id parameter in modules.php. Affected component: EasyContent module (PHP-Nuke). Root cause: unsafely constructed SQL queries in modules.php that interpolate page_id without proper va...