PHP-Nuke 5.x/6.x Web_Links Module - SQL Injection

Author: Albert Puigsech Galicia
type: webapps
platform: php
port: 
date_added: 2003-05-12  
date_updated: 2012-11-09  
verified: 1  
codes: CVE-2004-0269;OSVDB-3929  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 22589.txt  
source: https://www.securityfocus.com/bid/7558/info

It has been reported that multiple input validation bugs exist in the Web_Links module used by PHPNuke. Because of this, a remote user may be able to access the database and potentially gain access to sensitive information. Successful exploitation could result in compromise of the web forums or more severe consequences.

http://www.example.com/modules.php?op=modload&name=Web_Links&file=index&l_op=viewlink&cid=2%20<our_code>

where <our_code> represents attacker-supplied SQL code.