2 matches found
CVE-2008-6865
The CVE-2008-6865 entry describes a SQL injection in the PHP-Nuke framework, specifically in the Sectionsnew module’s modules.php. The vulnerability arises when remote attackers can inject SQL via the artid parameter in a printpage action, enabling arbitrary SQL execution. Affected component: PHP...
CVE-2006-3598
CVE-2006-3598 affects the PHP-Nuke Sections module. The vulnerability is a SQL injection in the viewarticle op via the artid parameter, allowing remote attackers to execute arbitrary SQL commands. Public references indicate exploitation avenues exist (e.g., Exploit-DB, SecurityFocus). CVSS metric...