Security Advisory

CVE-2006-0908

CVE vulnerability detail — eXtreme Datacenter Security Operations

Published 2006-02-28 02:00:00

Last updated 2024-08-07 16:48:56

Assigner mitre

State PUBLISHED

Description

PHP-Nuke 7.8 Patched 3.2 allows remote attackers to bypass SQL injection protection mechanisms via /%2a (/*) sequences with the "ad_click" word in the query string, as demonstrated via the kala parameter.

← Browse all CVEs View on cve.org ↗