Security Advisory
CVE-2008-0922
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php.