CVE-2008-3513

The CVE-2008-3513 entry describes a SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke. The flaw is triggered via the catid parameter in a category action to modules.php, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is rated HIGH with a CVSS ...