CVE-2008-7226: PHP-Nuke Recipe Module

High severity, CVSS 7.5. EPSS: 1% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the recipeid parameter.

Affected products

• PHP-Nuke Recipe Module: version 1.3 only; version 1.4 only

Published 2009-09-14. Last modified 2026-06-16.