CVE-2008-0880

The CVE-2008-0880 entry concerns an SQL injection in the EasyContent module for PHP-Nuke, exploitable via the page_id parameter in modules.php. Affected component: EasyContent module (PHP-Nuke). Root cause: unsafely constructed SQL queries in modules.php that interpolate page_id without proper va...