CVE-2008-3513

The CVE-2008-3513 entry describes a SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke. The flaw is triggered via the catid parameter in a category action to modules.php, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is rated HIGH with a CVSS ...

CVE-2006-6800

The CVE-2006-6800 issue affects Limbo CMS, specifically the eventcal module (eventcal/mod_eventcal.php, version 1.0). It is a PHP remote file inclusion vulnerability that lets an attacker supply a URL in the lm_absolute_path parameter to execute arbitrary PHP code on the server. This Remote Code ...