CVE-2010-5083

CVE-2010-5083 : A SQL injection vulnerability exists in the Web_Links module of PHP-Nuke 8.0, allowing remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php. The issue is caused by unsanitized input in that parameter, with potential partial confi...

CVE-2008-0879

CVE-2008-0879 affects the PHP-Nuke Web_Links module. The vulnerability is in modules.php (viewlink action) where the cid parameter can be manipulated to perform SQL injection, enabling remote execution of arbitrary SQL commands against the underlying database. The CVSS v2 base score is 7.5 (HIGH)...