Vulnerability Details CVE-2014-3934
SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics[] parameter to modules.php.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.008
EPSS Ranking 73.5%
CVSS Severity
CVSS v2 Score 7.5
References
Products affected by CVE-2014-3934
-
cpe:2.3:a:phpnuke:php-nuke:8.3
-
cpe:2.3:a:phpnuke:submit_news_module:-