Francisco Burzi » Php-nuke » 6.5_final : Security Vulnerabilities, CVEs, Published In 2003 (Sql injection)

Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.