CVE-2008-0881

CVE-2008-0881 describes a SQL injection in the PHP-Nuke-based Okul 1.0 module. The vulnerability occurs in the modules.php handler for the okullar action, where the okulid parameter is used unsafely, enabling remote attackers to craft arbitrary SQL commands. This can lead to data exposure or modi...