| Package | Affected versions | Patched versions |
|---|---|---|
| php-nuke | = 7.8 |
SQL injection vulnerability in PHP-Nuke before 7.8 Patched 3.2 allows remote attackers to execute arbitrary SQL commands via encoded /%2a (/*) sequences in the query string, which bypasses regular expressions that are intended to protect against SQL injection, as demonstrated via the kala parameter.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free