SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle operation.
https://www.exploit-db.com/exploits/5161
https://exchange.xforce.ibmcloud.com/vulnerabilities/40720