CVE-2008-6728

SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php.

Link	Resource
http://osvdb.org/52033
http://marc.info/?l=bugtraq&m=123073887531700&w=2	Exploit
http://www.securityfocus.com/archive/1/499656/100/0/threaded

Configuration 1

cpe:2.3:a:phpnuke:php-nuke:5.6:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.3:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.4:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.1:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:5.0.1:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:5.5:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:5.3:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:6.9:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:5.3.1:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:5.0:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:6.8:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:6.6:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.5:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.2:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.7:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:5.2:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.8:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:6.0:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:6.7:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.0:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:6.5:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:5.1:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:7.6:*:*:*:*:*:*:* cpe:2.3:a:phpnuke:php-nuke:5.4:*:*:*:*:*:*:*

---

Published : 2009-04-20 02:30

Updated : 2018-10-11 08:57

---

NVD link : CVE-2008-6728

Mitre link : CVE-2008-6728

Php-nuke

Phpnuke

CWE-89