CVE-2014-3934

Name of the Vulnerable Software and Affected Versions PHP-Nuke version 8.3

Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the topics[] parameter in the "modules.php" endpoint, specifically within the Submit News module.

Recommendations For PHP-Nuke version 8.3, consider restricting access to the Submit News module until a patch is available, and avoid using the topics[] parameter in the modules.php endpoint to minimize the risk of exploitation.