SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter.
https://www.exploit-db.com/exploits/5192
https://euvd.enisa.europa.eu/vulnerability/EUVD-2008-5557