CVE-2008-1053

Kose_Yazilari module for PHP-Nuke contains multiple SQL injection vulnerabilities. The flaw allows remote attackers to modify the artid parameter in the viewarticle or printpage actions on modules.php to inject and execute arbitrary SQL commands. This is the core risk described across CVE-2008-10...