| Package | Affected versions | Patched versions |
|---|---|---|
| php-nuke | = 7.8 |
Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the (1) name, (2) sid, and (3) pid parameters in a POST request, which bypasses security checks that are performed for GET requests.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free