EUVD-2004-2346

Malware in sbrugna...

CVE-2004-2354

CVE-2004-2354 describes a SQL injection vulnerability in the 4nGuestbook 0.92 module used with PHP-Nuke 6.5–6.9. The flaw allows remote attackers to modify SQL statements via the entry parameter to modules.php, with the potential to trigger MySQL errors that may enable cross-site scripting (XSS)....

CVE-2004-2354

SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter to modules.php, which can also facilitate cross-site scripting XSS attacks when MySQL errors are triggered...

CVE-2004-2354: Undefined Security Weakness

SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter to modules.php, which can also facilitate cross-site scripting XSS attacks when MySQL errors are triggered...

CVE-2004-2354

SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter to modules.php, which can also facilitate cross-site scripting XSS attacks when MySQL errors are triggered...

waraxe-2004-SA007.txt

================================================================================ waraxe-2004-SA007 ================================================================================ XSS and SQL injection bugs in 4nguestbook module for PhpNuke...

[waraxe-2004-SA#007 - XSS and SQL injection bugs in 4nguestbook module for PhpNuke]

================================================================================ waraxe-2004-SA007 ================================================================================ XSS and SQL injection bugs in 4nguestbook module for PhpNuke...