| Package | Affected versions | Patched versions |
|---|---|---|
| php-nuke | = 6.5= 6.5_beta1= 6.5_final= 6.5_rc1= 6.5_rc2= 6.5_rc3= 6.6= 6.7= 6.9 | |
| 4nguestbook | = 0.92 |
SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter to modules.php, which can also facilitate cross-site scripting (XSS) attacks when MySQL errors are triggered.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free