Vulnerabilities in PostNuke Phoenix

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в PostNuke Phoenix. Insufficient Anti-automation: Уязвимость в user.php в модуле NS-NewUser...

Vulnerabilities in PostNuke

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в PostNuke. Insufficient Anti-automation: Уязвимость в user.php в модуле NS-NewUser...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PostNuke: crossite scripting, automation protection bypass...

Sql injection

SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a displayterm action to index.php...

CVE-2008-2191

SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a displayterm action to index.php...

CVE-2008-2191

SQL injection vulnerability in the pnEncyclopedia module 0.2.0 and earlier for PostNuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a displayterm action to index.php...

CVE-2008-2191

The CVE-2008-2191 entry concerns a SQL injection vulnerability in the PostNuke pnEncyclopedia module (version 0.2.0 and earlier). The flaw allows an unauthenticated, remote attacker to inject arbitrary SQL via the id parameter used by the display_term action in index.php. Affected component: pnEn...

[ECHO_ADV_90$2008] PostNuke Module pnEncyclopedia <= 0.2.0 (id) Blind Sql Injection Vulnerability

ECHOADV90$2008 ----------------------------------------------------------------------------------------- ECHOADV90$2008 PostNuke Module pnEncyclopedia = 0.2.0 id Blind Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author :...

PostNuke Module pnEncyclopedia <= 0.2.0 SQL Injection Vulnerability

Exploit for unknown platform in category web applications =================================================================== PostNuke Module pnEncyclopedia = 0.2.0 SQL Injection Vulnerability =================================================================== \ /\ \ / | \ \ | / \ // / | \ | \...

PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection

PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV90$2008 ----------------------------------------------------------------------------------------- ECHOADV90$2008 PostNuke Module pnEncyclopedia = 0.2.0 id...

PostNuke Module pnEncyclopedia &lt;= 0.2.0 SQL Injection Vulnerability

No description provided by source. \ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV90$2008 ----------------------------------------------------------------------------------------- ECHOADV90$2008 PostNuke Module pnEncyclopedia = 0.2.0 id Blind Sql Injection...

adv90-K-159-2008.txt

ECHOADV90$2008 ----------------------------------------------------------------------------------------- ECHOADV90$2008 PostNuke Module pnEncyclopedia = 0.2.0 id Blind Sql Injection Vulnerability ----------------------------------------------------------------------------------------- Author :...

PostNuke Module pnEncyclopedia 0.2.0 - SQL Injection

\ /\ \ / | \ \ | / \ // / | \ | \ \ Y / | \ / / \ /| /\ / / / / / .OR.ID ECHOADV90$2008 ----------------------------------------------------------------------------------------- ECHOADV90$2008 PostNuke Module pnEncyclopedia = 0.2.0 id Blind Sql Injection Vulnerability...

Sql injection

SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the eid parameter in an event action...

Sql injection

SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a display action...

CVE-2008-2012

SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the eid parameter in an event action...

CVE-2008-2013

SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a display action...

CVE-2008-2013

SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a display action...

CVE-2008-2012

CVE-2008-2012 affects the PostSchedule 1.0 module for PostNuke. A SQL injection in index.php allows remote attackers to modify the database by supplying the eid parameter in an event action. Documented impact: arbitrary SQL execution with a CVSSv2 base score of 7.5 (HIGH). No remediation details ...

CVE-2008-2013

CVE-2008-2013 affects the pnFlashGames module (PostNuke) versions 1.5–2.5. A SQL injection exists in index.php during the display action when magic_quotes_gpc is disabled, enabling an attacker to modify or retrieve database data via the id parameter. The NVD entry reports a base CVSSv2 score of 6...