CVE-2008-1219

The vulnerability is in Kutub-i Sitte (KutubiSitte) version 1.1, a PHP-Nuke module. It allows SQL injection via the kid parameter in a hadisgoster action to modules.php, enabling remote attackers to execute arbitrary SQL commands. The connected PT-2008-2812 entry provides a mitigation: restrict a...

CVE-2008-1219

creationtimestamp| type| source ---|---|--- 2008-03-06 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/31344...