CVE-2008-6865: SQL Injection
Published Jul 14, 2009
·Updated
SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action.
Affected Software
2 affected components
PHP-Nuke Sections module
Phpnuke Php-nuke
Event History
Jul 14, 2009
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Data Sourced
02:30 PM
DescriptionWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2008-6865?
CVE-2008-6865 is considered a medium severity vulnerability due to its potential to allow remote attackers to execute arbitrary SQL commands.
2
How do I fix CVE-2008-6865?
To fix CVE-2008-6865, it's recommended to sanitize the artid parameter in the printpage action to prevent SQL injection.
3
What software is affected by CVE-2008-6865?
CVE-2008-6865 affects the Sectionsnew module for PHP-Nuke.
4
Can CVE-2008-6865 be exploited remotely?
Yes, CVE-2008-6865 can be exploited remotely by attackers via the artid parameter in a web request.
5
What is the impact of CVE-2008-6865 on applications?
The impact of CVE-2008-6865 can lead to unauthorized access to database contents and potential data manipulation.