CVE-2008-0922

Php-nuke Manuales - SQL Injection

Title source: rule

Description

SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php.

Exploits (1)

exploitdb WORKING POC VERIFIED
by Mehmet Ince · textwebappsphp
https://www.exploit-db.com/exploits/5168

Scores

EPSS 0.0040
EPSS Percentile 60.5%

Classification

CWE
CWE-89
Status draft

Affected Products (1)

php-nuke/manuales

Timeline

Published Feb 22, 2008
Tracked Since Feb 18, 2026