PHPNuke 1.0/2.5/3.0/4.x/5.x/6.x/7.x modules.php Multiple Parameter XSS Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/3609/info PHPNuke is a website creation/maintenance tool. PHPNuke is prone to cross-site scripting attacks. It is possible to create a link to the PHPNuke user information page, 'user.php', which contains malicious script...

PT-2014-5614

Name of the Vulnerable Software and Affected Versions PHP-Nuke version 8.3 Description A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by exploiting the topics parameter in the "modules.php" endpoint, specifically within the Submit News...

CVE-2014-3934: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the SubmitNews module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics parameter to modules.php...

CVE-2010-5083: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WebLinks module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php...

PT-2012-1326

Name of the Vulnerable Software and Affected Versions PHP-Nuke version 8.0 Description A SQL injection issue exists in the Web Links module, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the url parameter in an Add action to modules.php...

CVE-2011-1481

CVE-2011-1481 affects PHP-Nuke 8.0 and earlier. The vulnerability is multiple cross-site scripting (XSS) in the Feedback action of modules.php, exploitable via the sender_name or sender_email parameters. Impact described as allowing remote attackers to inject arbitrary web script or HTML. NVD met...

PT-2011-3160

Name of the Vulnerable Software and Affected Versions PHP-Nuke versions 8.0 and earlier Description The issue allows remote attackers to inject arbitrary web script or HTML via the sender name or sender email parameter in a Feedback action to "modules.php" API endpoint. This can lead to cross-sit...

CVE-2011-1481: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 sendername or 2 senderemail parameter in a Feedback action to modules.php...

Proteccion Legal (modules.php) Local File Inclusion

Exploit for php platform in category web applications =================================================== Proteccion Legal modules.php Local File Inclusion =================================================== Author: Net.Edit0r Email : email protected & email protected Google dork :...

APT-WEBSHOP-SYSTEM - modules.php SQL Injection

APT-WEBSHOP-SYSTEM - modules.php SQL Injection =============================================== APT-WEBSHOP-SYSTEM modules.php SQL injection =============================================== / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|...

APT-WEBSHOP-SYSTEM - 'modules.php' SQL Injection

=============================================== APT-WEBSHOP-SYSTEM modules.php SQL injection =============================================== / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|/ // APT-WEBSHOP-SYSTEM modules.php SQL...

PHP-Nuke Module print 6.0 - printsid SQL Injection

PHP-Nuke Module print 6.0 - printsid SQL Injection PHP-Nuke Module print 6.0 print&sid SQL Injection Vulnerability Author : Gamoscu Homepage : www.1923turk.com Blog : http://gamoscu.wordpress.com Script : PHP-Nuke Module print 6.0 Download :...

CVE-2010-1713: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands via the sid parameter in a News article modload action...

CVE-2009-3506

Multiple cross-site scripting XSS vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 cookuser parameter to index.php and the 2 name parameter to modules.php...

CVE-2009-3507

CVE-2009-3507 is a vulnerability in CMSphp 0.21 where a directory traversal via the mod_file parameter allows remote attackers to include and execute arbitrary local files using “..”. This is supported by multiple records (NVD, CVE list, PRION, CVELIST) and aligned with the observed CVSSv2 base s...

CVE-2009-3506: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 cookuser parameter to index.php and the 2 name parameter to modules.php...

CVE-2009-3507: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modfile parameter...

Sql injection

SQL injection vulnerability in the MyeGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...

CVE-2008-7038: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the MyeGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...

CVE-2009-2618: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Surveys aka NS-Polls module in MDPro MD-Pro 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php...