A vulnerability has been reported to exist in the Survey module of PHP-Nuke that may allow a remote attacker to inject malicious SQL syntax into database queries. The source of this issue is insufficient sanitization of user-supplied input. A malicious user may influence database queries in order to view or modify sensitive information, potentially compromising the software or the database.
A vulnerability has been reported to exist in the Survey module of PHP-Nuke that may allow a remote attacker to inject malicious SQL syntax into database queries. The source of this issue is insufficient sanitization of user-supplied input. A malicious user may influence database queries in order to view or modify sensitive information, potentially compromising the software or the database.