CVE-2002-1673

The CVE-2002-1673 issue affects Webmin 0.92: the web interface fails to properly quote/filter script code in files shown to the interface, enabling local users to run scripts and potentially steal cookies by inserting script into files or fields such as a real user name entry in /etc/passwd. The ...

CVE-2004-1820

PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on a remote web server that contains fileFunctions.php...

CVE-2004-1818

CVE-2004-1818 describes a cross-site scripting (XSS) vulnerability in the nmimage.php script of 4nalbum 0.92 running on PHP-Nuke 6.5–7.0. Attackers can inject arbitrary script via the z parameter to execute code in the context of other users. The provided documents do not specify exploit details,...

CVE-2004-1819

4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information via a direct request to displaycategory.php, which reveals the path in an error message...

CVE-2004-1821

SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations via the gid parameter...

WarpSpeed 4nAlbum Module 0.92 - nmimage.php?z Cross-Site Scripting

WarpSpeed 4nAlbum Module 0.92 - nmimage.php?z Cross-Site Scripting source: https://www.securityfocus.com/bid/9881/info It has been reported that 4nAlbum is prone to multiple vulnerabilities. These issues are primarily due to a failure of the module to validate user input. There is an information...

WarpSpeed 4nAlbum Module 0.92 - displaycategory.php?basepath Remote File Inclusion

WarpSpeed 4nAlbum Module 0.92 - displaycategory.php?basepath Remote File Inclusion source: https://www.securityfocus.com/bid/9881/info It has been reported that 4nAlbum is prone to multiple vulnerabilities. These issues are primarily due to a failure of the module to validate user input. There is...

Local privalege escalation issues with Webmin 0.92

18-02-02 -- [email protected] About Webmin: ------------- "Webmin is a web-based interface for system administration for Unix. Using any browser that supports tables and forms and Java for the File Manager module, you can setup user accounts, Apache, DNS, file sharing and so on." Problem 1...

pIRCh-dcc.txt

Date: Thu, 12 Nov 1998 11:20:56 -0600 From: "[email protected]" To: [email protected] Subject: Old IRC Client bug Re-Applied If this has already been announced, well, screw me. Problem: The IRC Internet Relay Chat Client, pIRCh automatically assigns your main pirch directory to where DCC...