51 matches found
CVE-2006-1362
The CVE-2006-1362 entry affects Mini-Nuke CMS System 1.8.2 and earlier, with multiple SQL injection vulnerabilities that allow remote attackers to execute arbitrary SQL via parameters in members.asp (uid), articles.asp and programs.asp (catid), and hpages.asp and forum.asp (id). The pages.asp/id ...
Mini-Nuke<=1.8.2 SQL injection (6)
//mini-nuke board turk have many sql injection founded by Moroccan Security Team //Creetz to: Moroccan Security Team Dr.E-vil,Dr.Erase,H0550N,|ucifer,DaBDouB-MoSiKaR OverclockiX,ki11er ,Dranzelz,Esp!onLeRaVaGe,ameer,www.lezr.com and all muslim morocco 1...
Sql injection
SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: version 2.3 was later reported to be vulnerable as well...
CVE-2006-0870
SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: version 2.3 was later reported to be vulnerable as well...
CVE-2006-0870
The CVE-2006-0870 entry concerns the Mini-Nuke CMS System (versions 1.8.2 and earlier). The vulnerability is a SQL injection in pages.asp accessible via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The note also states that version 2.3 was later reported vulnerab...
CVE-2006-0870
SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: version 2.3 was later reported to be vulnerable as well...
Default credentials
membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the passwords of other members via a lostpassnew action with a modified x parameter...
Sql injection
SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter...
CVE-2006-0203
The CVE-2006-0203 entry affects Mini-Nuke CMS System 1.8.2 and earlier. The vulnerability arises because membership.asp does not verify the old password when a user changes their password, enabling remote attackers to alter other members’ passwords by abusing a lostpassnew action with a modified ...
CVE-2006-0199
CVE-2006-0199 describes a SQL injection vulnerability in the Mini-Nuke CMS System up to version 1.8.2, exploitable via the hid parameter in news.asp. The issue allows remote attackers to execute arbitrary SQL commands. The available connected documents confirm the affected component and the injec...