high7.5Public exploit code
CVE-2014-3934
SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics[] parameter to …
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Nuke 'Submit_News' Component - SQL Injection2014-05-24 · webapps · php · Verified
Impact
SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics[] parameter to modules.php.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Phpnuke | Php-Nuke | Version 8.3 |
| Phpnuke | Submit News Module | All versions |