PT-2008-2812 · Kutubisitte · Kutub-I Sitte

Name of the Vulnerable Software and Affected Versions: Kutub-i Sitte KutubiSitte version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the kid parameter in a hadisgoster action to modules.php. Recommendations: For Kutub-i Sitt...

CVE-2008-1219: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Kutub-i Sitte KutubiSitte 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid parameter in a hadisgoster action to modules.php...