CVE-2008-0907

CVE-2008-0907 describes an SQL injection in the Inhalt module of PHP-Nuke that allows remote attackers to execute arbitrary SQL commands via the cid parameter. The vulnerability impact is a loss of data confidentiality/integrity and potential unauthorized access, as indicated by the CVSS metrics ...