• info
• discussion
• exploit
• solution
• references

PHP-Nuke Survey Module SQL Injection Vulnerability

The following proof of concept has been provided:

http://www.example.com/php-nuke/modules.php?name=Surveys&pollID=a'[sql_code_here]