SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a show_dvd action.
| Software | From | Fixed in |
|---|---|---|
| warpspeed / 4ndvddb | 0.91 | 0.91.x |
| phpnuke / 4ndvddb | 0.91 | 0.91.x |