← Database

CVE-2008-1298

HIGH CVSS: 7.5 Published: 2008-03-12 Modified: 2026-06-16

Description

SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in a viewcat action to modules.php.

Affected Platforms

Kyantonius Hadith ModulePhp-Nuke Hadith Module

Weakness Type

CWE-89

References