CVE-2008-0461: SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic...

Security readout for executives and security teams

CVE-2008-0461 is a SQL injection issue in PHP-Nuke 8.0 FINAL and earlier. If magic_quotes_gpc is disabled, a remote attacker may manipulate database queries through the Search module. For executives, the main concern is old public-facing PHP-Nuke sites that may expose database contents or allow data tampering. Exposure is most likely on legacy PHP-Nuke deployments running 8.0 FINAL or earlier, especially internet-facing sites with the Search module available and magic_quotes_gpc disabled. The provided affected-product metadata is incomplete and lists vendor/product as n/a. Treat this as a high-priority legacy exposure issue, not a modern zero-day. Any internet-facing PHP-Nuke 8.0 or earlier system should be investigated quickly because SQL injection can affect confidentiality and integrity of database-backed content. Mitigation focus: Inventory and retire PHP-Nuke 8.0 FINAL or earlier installations.; Check vendor or trusted advisory guidance for patched or supported replacement versions.; Restrict public access to affected legacy sites until remediation is confirmed..

Prepared

Jun 28, 2026, 19:27 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.