NetSight
high7.5

CVE-2007-1450

SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via…

Impact

SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter.

Affected products

VendorProductAffected versions
PhpnukePhp-Nuke
Versions 7.0, 7.1, 7.2, 7.3, 7.4, 7.5

References