8302 matches found
CVE-2004-2067
CVE-2004-2067: SQL injection in controlpanel.php of Jaws Framework and Content Management System 0.4 allows remote attackers to bypass authentication by injecting via the (1) user, (2) password, or (3) crypted_password parameters. Impact indicated as partial confidentiality/integrity/availability...
Multiples Full Path Disclosure in php-nuke 7.6 (and below)
Multiples Full Path Disclosure in php-nuke 7.6 and below --------------------------------------------------------------------------- Author: project-restart Date: 27. April 2005 Location: Brazil Web: http://www.project-restart.org/ Target: PHP-nuke 7.6 and below...
DUPortal/DUPortal Pro Multiple Scripts SQL Injection (1)
The remote host is running DUPortal, a content management system written in ASP. The remote version of this software is vulnerable to several SQL injection vulnerabilities in files 'details.asp', 'search.asp', 'default.asp' , 'cat.asp' and more. With a specially crafted URL, an attacker can explo...
PT-2005-2197 · Ariadne · Ariadne Cms
Name of the Vulnerable Software and Affected Versions: Ariadne CMS version 2.4 Description: The issue concerns a PHP remote code injection vulnerability in loader.php, allegedly allowing remote attackers to execute arbitrary PHP code by modifying the ariadne parameter to reference a URL on a remo...
PHPNuke76dl.txt
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 phpnuke 7.6 Multiple vulnerabilities in Downloads Module cXIb8O3.13 Author: Maksymilian Arciemowicz cXIb8O3 Date: 5.4.2005 from securityreason.com TEAM - --- 0.Description --- PHP-Nuke is a Web Portal System, storytelling software, news system, online...
Mambo Detection
The remote host is running Mambo, a content management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17672; scriptversion"1.24"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"Mambo Detection";...
subdreamerSQL.txt
//==========================================// \ GHC - Subdreamer - ADVISORY // Product: Subdreamer \ Version: Subdreamer Light // URL: www.subdreamer.com \ VULNERABILITY CLASS: SQL injection //==========================================// Product Description "Powered by PHP and MySQL, Subdreamer...
Phorum < 5.0.15 HTML Injection
Binary data 2705.prm...
NewsScript Content Management Admin Authentication Bypass
Binary data 2687.prm...
Vulnerabilities in Aura CMS
--------------------------------------------------------------------------- Vulnerabilities in Aura CMS --------------------------------------------------------------------------- Author: y3dips Date: Januari, 25th 2005 Location: Indonesia, Jakarta Web: http://echo.or.id/adv/adv011-y3dips-2005.tx...
panews.txt
===================================================== paNews 2.0b4: SQL Injection and remote code execution ===================================================== FraMe - frame at kernelpanik.org http://www.kernelpanik.org ===================================================== paNews es un script...
[SECURITYREASON.COM] PostNuke Critical XSS 0.760-RC2=>x cXIb8O3.2
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke Critical XSS 0.760-RC2=x cXIb8O3.2 Author: cXIb8O3Maksymilian Arciemowicz Date: 19.2.2005 from securityreason.com TEAM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 and 0.760-RC2 PostNuke is an open source, open developement...
[SECURITYREASON.COM] PostNuke Critical SQL Injection 0.760-RC2=>x cXIb8O3.1
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke Critical SQL Injection 0.760-RC2=x cXIb8O3.1 Author: cXIb8O3Maksymilian Arciemowicz Date: 15.2.2005 from securityreason.com TEAM - --- 0.Description --- PostNuke: The Phoenix Release 0.760-RC2=x PostNuke is an open source, open developement...
Hackgen Security Advisory 2005.3
http://www.hackgen.org/advisories/hackgen-2005-003.txt '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' hackgen-2005-003 ' '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' SQL injection bugs in DCP-Portal '...
phpWebSite Detection
The remote host is running phpWebSite, a website content management system written in PHP. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17222; scriptversion"1.21"; scriptsetattributeattribute:"pluginmodificationdate", value:"2023/05/24"; scriptnameenglish:"phpWebSi...
waraxe-2005-SA040.txt
================================================================================ waraxe-2005-SA040 ================================================================================ Full path disclosure and XSS in PhpNuke 6.x-7.6...
Invision Power Board Software Detection
The remote host is running Invision Power Board , a suite of PHP scripts for operating a web-based bulletin board system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid17203; scriptversion"1.19"; scriptsetattributeattribute:"pluginmodificationdate",...
[hackgen-2005-#003] - SQL injection bugs in DCP-Portal
http://www.hackgen.org/advisories/hackgen-2005-003.txt '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' hackgen-2005-003 ' '''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''''' ' SQL injection bugs in DCP-Portal '...
DCP-Portal Multiple Scripts SQL Injection
The remote host is running DCP-Portal, a content management system powered by PHP. The version of DCP-Portal installed on the remote host fails to sanitize user-supplied input to many of its parameters before using it, either in database queries or dynamic web page generation. An attacker may be...
[Full-Disclosure] [waraxe-2005-SA#040] - Full path disclosure and XSS in PhpNuke 6.x-7.6
================================================================================ waraxe-2005-SA040 ================================================================================ Full path disclosure and XSS in PhpNuke 6.x-7.6...