CVE-2008-0934

SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idcatg parameter in a ViewCatg action...

PHP-Nuke Module Kose_Yazilari (artid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= PHP-Nuke Module KoseYazilari artid SQL Injection Vulnerability ================================================================= CoRPITX Turkey PHP-Nuke KoseYazilari SQL...

Sql injection

SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php...

PHP-Nuke genaral print SQL Injection(id)

PHP-Nuke genaral print SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl:"modules.php?name"print DORK 2 : allinurl:"modules.php?name=Hikaye" DORK : allinurl:"modules.php?name=Fikralar" DORK :...

PHP-Nuke Siir SQL Injection(id)

PHP-Nuke Siir SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: modules-php-name-Siir all modules.php?name=xx subject have secret print and and cant see op=print but cann- use exploit EXPLOIT :...

Sql injection

SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the okulid parameter in an okullar action...

CVE-2008-0881

CVE-2008-0881 describes a SQL injection in the PHP-Nuke-based Okul 1.0 module. The vulnerability occurs in the modules.php handler for the okullar action, where the okulid parameter is used unsafely, enabling remote attackers to craft arbitrary SQL commands. This can lead to data exposure or modi...

PHP-Nuke Module Siir - id SQL Injection

PHP-Nuke Module Siir - id SQL Injection PHP-Nuke Siir SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAÄ°L : [email protected] DORK 1 : allinurl: modules-php-name-Siir all modules.php?name=xx subject have secret print and and cant see op=print but cann- u...

PHP-Nuke Module Siir (id) Remote SQL Injection Vulnerability

Exploit for unknown platform in category web applications ============================================================ PHP-Nuke Module Siir id Remote SQL Injection Vulnerability ============================================================ PHP-Nuke Siir SQL Injectionid DORK 1 : allinurl:...

PHP-Nuke Module EasyContent - page_id SQL Injection

PHP-Nuke Module EasyContent - pageid SQL Injection ------------------------------------------------------------------------------- php-nuke modules EasyContent remote sql inj ------------------------------------------------------------------------------- found =xoron...

PHP-Nuke Advertising Module Modules.PHP SQL注入漏洞

PHP-Nuke Advertising Module是一款基于PHP的WEB应用程序。 PHP-Nuke Advertising Module不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于'Modules.PHP'脚本对用户提交的WEB参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或可能操作数据库。 PHP-Nuke Advertising Module 0.9 升级到最新的PHP-Nuke Advertising Module 0.9...

CVE-2007-5918

Cross-site request forgery CSRF vulnerability in edit.php in the MS TopSites add-on for PHP-Nuke does not verify that the uname parameter matches the current account, which allows remote authenticated users to change arbitrary accounts or change the SiteTitleName field as an arbitrary user via a...

CVE-2007-5918

Cross-site request forgery CSRF vulnerability in edit.php in the MS TopSites add-on for PHP-Nuke does not verify that the uname parameter matches the current account, which allows remote authenticated users to change arbitrary accounts or change the SiteTitleName field as an arbitrary user via a...

CVE-2007-5918

CVE-2007-5918 is a CSRF vulnerability in the MS TopSites add-on for PHP-Nuke. The flaw occurs in edit.php where the uname parameter is not verified against the current account, allowing a remote authenticated user to change arbitrary accounts or modify the SiteTitleName by supplying a modified un...

CVE-2007-4253

CVE-2007-4253 affects Envolution (News module, pages.php) with a SQL injection vulnerability exposed via the topic parameter in News 1.1.0 and earlier. The root cause is unsafely constructed SQL leading to arbitrary SQL execution by remote attackers. Connected documents confirm the same vulnerabi...

Web Slider 0.6 - 'path' Remote File Inclusion

Web Slider 0.6pathRemote File Inclusion Vulnerabilities D.Script: http://sourceforge.net/projects/webslider/ Discovered by: GolDM = Mahmoodali Homepage: http://Www.Tryag.Com/cc Exploit:Path/index.php?path=Shell Exploit:Path/modules/pdf.php?path=Shell Exploit:Path/plugins/highlight.php?path=Shell...

Sql injection

SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the categoryid parameter...

gallery-rfi.txt

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-= Gallery = 1.4.4-pl4 phpbbrootpath Remote File Include Vulnerability Script : Gallery Version : 1.4.4-pl4 URL : http://puzzle.dl.sourceforge.net/sourceforge/gallery/gallery-1.6-alpha3.tar.gz Author : BorN To K!LL...

oscommerce-xss.txt

Oscommerce Multiple XSS in admin section. Vendor url:Http://www.oscommerce.com Advisore:http://lostmon.blogspot.com/2006/11/ oscommerce-multiple-xss-in-admin.html Vendor notify:YES Exploit available: YES osCommerce contains a flaw that allows a remote cross site scripting attack.This flaw exists...

CVE-2006-5565

CRLF injection vulnerability in MAXdev MD-Pro 1.0.76 allows remote attackers to inject arbitrary HTTP headers via a CRLF sequence in the 1 name, 2 file, 3 module, and 4 func parameters in a index.php; and the 5 file parameter in b modules.php. NOTE: the provenance of this information is unknown;...