CVE-2008-0906: SQL Injection
SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle operation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-0906?
The severity of CVE-2008-0906 is rated as high due to the potential for remote attackers to execute arbitrary SQL commands.
How do I fix CVE-2008-0906?
To fix CVE-2008-0906, it is recommended to upgrade to the latest version of PHP-Nuke that addresses this vulnerability.
What are the potential impacts of CVE-2008-0906?
The potential impacts of CVE-2008-0906 include unauthorized data manipulation and unauthorized access to the database.
Who is affected by CVE-2008-0906?
CVE-2008-0906 affects users of the Docum module in PHP-Nuke versions prior to the patch that mitigates this vulnerability.
What types of attacks can be performed due to CVE-2008-0906?
Due to CVE-2008-0906, attackers can carry out SQL injection attacks, potentially allowing them to manipulate or extract sensitive data from the database.