PHP-Nuke 6.0 Modules.PHP Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6465/info A denial of service vulnerability has been reported for the modules.php script used by PHP-Nuke. The vulnerability occurs because the modules.php script does not properly validate some URI parameters. An attacke...

PHP-Nuke 5.6 Modules.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/6088/info A SQL injection vulnerability has been reported for PHP-Nuke 5.6. The vulnerability is due to insufficient sanitization of variables used to construct SQL queries in some scripts. It is possible to modify the...

Nortel Networks SRG V16 modules.php module Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/30687/info Navboard is prone to multiple local file-include vulnerabilities and a cross-site scripting vulnerability. An attacker can exploit the local file-include vulnerability using directory-traversal strings to execu...

PHPNuke INP Modules.PHP Cross-Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/19208/info PHPNuke INP is prone to a cross-site scripting vulnerability that affects the 'modules.php' script. The specific version affected is currently unknown...

NPDS 4.8 /5.0 Modules.php Lettre Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/13803/info NPDS is affected by multiple vulnerabilities resulting from input validation errors. These issues may allow remote attackers to carry out HTML injection, cross-site scripting and SQL injection attacks. This may...

PHP-Nuke <= 7.8 (modules.php) SQL Injection Exploit

No description provided by source. / PHP-Nuke =7.8 SQL injection exploit need MySQL 4.0 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru / // tested on 7.8 include stdio.h include string.h include sys/types.h include sys/socket.h include netinet/in.h include netdb.h include regex.h defi...

PHP-Nuke 6.5 Modules.PHP Username URI Parameter Cross Site Scripting Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/7570/info A cross site scripting vulnerability has been reported for PHP-Nuke. Specifically, PHP-Nuke does not sufficiently sanitize user-supplied input for the 'username' URI parameter to the modules.php script. This may...

APT-WEBSHOP-SYSTEM modules.php SQL Injection Vulnerability

No description provided by source. =============================================== APT-WEBSHOP-SYSTEM modules.php SQL injection =============================================== / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|/ //...

CVE-2011-1481

CVE-2011-1481 affects PHP-Nuke 8.0 and earlier. The vulnerability is multiple cross-site scripting (XSS) in the Feedback action of modules.php, exploitable via the sender_name or sender_email parameters. Impact described as allowing remote attackers to inject arbitrary web script or HTML. NVD met...

Proteccion Legal (modules.php) Local File Inclusion

Exploit for php platform in category web applications =================================================== Proteccion Legal modules.php Local File Inclusion =================================================== Author: Net.Edit0r Email : email protected & email protected Google dork :...

APT-WEBSHOP-SYSTEM - modules.php SQL Injection

APT-WEBSHOP-SYSTEM - modules.php SQL Injection =============================================== APT-WEBSHOP-SYSTEM modules.php SQL injection =============================================== / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|...

APT-WEBSHOP-SYSTEM - 'modules.php' SQL Injection

=============================================== APT-WEBSHOP-SYSTEM modules.php SQL injection =============================================== / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|/ // APT-WEBSHOP-SYSTEM modules.php SQL...

PHP-Nuke Module print 6.0 - printsid SQL Injection

PHP-Nuke Module print 6.0 - printsid SQL Injection PHP-Nuke Module print 6.0 print&sid SQL Injection Vulnerability Author : Gamoscu Homepage : www.1923turk.com Blog : http://gamoscu.wordpress.com Script : PHP-Nuke Module print 6.0 Download :...

CVE-2009-3506

Multiple cross-site scripting XSS vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 cookuser parameter to index.php and the 2 name parameter to modules.php...

CVE-2009-3507

CVE-2009-3507 is a vulnerability in CMSphp 0.21 where a directory traversal via the mod_file parameter allows remote attackers to include and execute arbitrary local files using “..”. This is supported by multiple records (NVD, CVE list, PRION, CVELIST) and aligned with the observed CVSSv2 base s...

Sql injection

SQL injection vulnerability in the MyeGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...

Sql injection

SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action...

CVE-2009-2307

SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro aka MD-Pro allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php...

Sql injection

SQL injection vulnerability in the CWGuestBook module 2.1 and earlier for MAXdev MDPro aka MD-Pro allows remote attackers to execute arbitrary SQL commands via the rid parameter in a viewrecords action to modules.php...

CVE-2009-2307

CVE-2009-2307 affects MAXdev MDPro (aka MD-Pro) CWGuestBook module 2.1 and earlier. The vulnerability is an SQL injection via the rid parameter in a viewrecords action to modules.php, enabling remote data manipulation as described in the CVE entry. Connected documents corroborate the vulnerabilit...