CVE-2008-1348

Cross-site scripting XSS vulnerability in index.php in the eWebsite eWeather Weather module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the chart parameter to modules.php...

Cross site scripting

Cross-site scripting XSS vulnerability in index.php in the eWebsite eWeather Weather module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the chart parameter to modules.php...

Sql injection

SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter to modules.php...

phpnukezclass-sql.txt

----- RBT-4 crew Lovebug Italy -------- Author : Lovebug Script : PHP-Nuke Module ZClassifieds cat SQL Injection Bug : modules.php?name=ZClassifieds&cat= S Q L Exploit : -9999999//union//select//pwd,aid//from//nukeauthors/where%20admin1/ Original Advisory:...

PT-2008-2906 · Php Nuke Team · Php-Nuke

Name of the Vulnerable Software and Affected Versions: PHP-Nuke ZClassifieds module affected versions not specified Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the cat parameter in the modules.php endpoint. Recommendations: For...

CVE-2008-1298

SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in a viewcat action to modules.php...

Sql injection

SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to modules.php...

Sql injection

SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in a viewcat action to modules.php...

CVE-2008-1314

SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to modules.php...

CVE-2008-1308

The CVE-2008-1308 entry concerns the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke, where a SQL injection vulnerability exists in the ViewCatg action (id_catg parameter in modules.php). The cited sources indicate remote SQL command execution is possible, though exploitation details, affected...

PT-2008-2812 · Kutubisitte · Kutub-I Sitte

Name of the Vulnerable Software and Affected Versions: Kutub-i Sitte KutubiSitte version 1.1 Description: The issue allows remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the kid parameter in a hadisgoster action to modules.php. Recommendations: For Kutub-i Sitt...

PHP-Nuke Copyright 2005 SQL

PHP-Nuke Copyright © 2005 by Francisco Burzi AUTHOR : TurkishWarriorr SiTE : http://1923turk.org MAL : [email protected] DORK : allinurl:"PHP-Nuke Copyright © 2005 by Francisco Burzi" DORK : allinurl:"gaestebuchv22&func" EXPLOIT :...

PHP-Nuke My_eGallery "gid" Remote SQL Injection

Aria-Security Team http://Aria-Security.Net ----------------------------- Shoutz: Aura, Null, imm02tal, Kinglet, and our staff PHP-Nuke MyeGallery "gid" Remote SQL Injection Dork: inurl:"modules.php?name=MyeGallery"...

Sql injection

Multiple SQL injection vulnerabilities in the KoseYazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a 1 viewarticle or 2 printpage action to modules.php...

phpnukereportaj-sql.txt

PHP-Nuke reportaj SQL Injection Vulnerability secid modules.php?name=roportaj&op=listarticles&secid= pwd = -1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Cpwd%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnukeauthors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A user=...

phpnukekose-sql.txt

CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PHP-Nuke KoseYazilari SQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net WHEN YOU PUT THIS SQL CODE YOU can SEE ADMýN NAME,ADMIN HASH DorK 1 : ''name KoseYazilari op viewarticle artid'' Dork 2 : ''na...

CVE-2008-0934

SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idcatg parameter in a ViewCatg action...

PHP-Nuke Module Kose_Yazilari (artid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= PHP-Nuke Module KoseYazilari artid SQL Injection Vulnerability ================================================================= CoRPITX Turkey PHP-Nuke KoseYazilari SQL...

Sql injection

SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php...

PHP-Nuke genaral print SQL Injection(id)

PHP-Nuke genaral print SQL Injectionid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl:"modules.php?name"print DORK 2 : allinurl:"modules.php?name=Hikaye" DORK : allinurl:"modules.php?name=Fikralar" DORK :...