536 matches found
[SECURITYREASON.COM] PostNuke Non Critical SQL Injection and Include 0.760-RC3=>x
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke Non Critical SQL Injection and Include 0.760-RC3=x cXIb8O3.10 Author: cXIb8O3Maksymilian Arciemowicz Date: 2.4.2005 from securityreason.com TEAM - --- 0.Description --- PostNuke: The Phoenix Release 0.760-RC3=X PostNuke is an open source, ope...
[SECURITYREASON.COM] PostNuke XSS and Full path disclosure 0.760RC3=>x
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke XSS and Full path disclosure 0.760RC3=x cXIb8O3.7 Author: Maksymilian Arciemowicz cXIb8O3 Date: 15.3.2005 from SECURITYREASON.COM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 and 0.760RC3 PostNuke is an open source, open...
[SECURITYREASON.COM] PostNuke SQL Injection 0.750=>x
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke Non Critical SQL Injection and Include 0.760-RC3=x cXIb8O3.10 Author: cXIb8O3Maksymilian Arciemowicz Date: 2.4.2005 from securityreason.com TEAM - --- 0.Description --- PostNuke: The Phoenix Release 0.760-RC3=X PostNuke is an open source, ope...
[SECURITYREASON.COM] PostNuke XSS 0.760{RC2,RC3}
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke XSS 0.760RC2,RC3 cXIb8O3.6 Author: Maksymilian Arciemowicz cXIb8O3 Date: 4.3.2005 from SECURITYREASON.COM - --- 0.Description --- PostNuke: The Phoenix Release 0.750 PostNuke is an open source, open developement content management system CMS...
PostNuke AutoTheme Module Multiple Unspecified Vulnerabilities
According to its banner, the version of AutoTheme for PostNuke on the remote host suffers from multiple, unspecified vulnerabilities affecting the 'Blocks' module. Reportedly, some of these issues may allow a remote attacker to gain unauthorized access to the remote host. Note that the recommende...
CVE-2005-1621
Directory traversal vulnerability in the pnModFunc function in pnMod.php for PostNuke 0.750 through 0.760rc4 allows remote attackers to read arbitrary files via a .. dot dot in the func parameter to index.php...
CVE-2005-1621
CVE-2005-1621 is a directory traversal vulnerability in PostNuke. Affects PostNuke 0.750 through 0.760rc4, in the pnModFunc function of pnMod.php. Attackers can read arbitrary files by supplying .. in the func parameter to index.php. The connected sources confirm the vulnerability and affected ve...
CVE-2005-1608
The CVE-2005-1608 entry concerns the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for PostNuke. Multiple unspecified vulnerabilities affect the Blocks component, with exposure described as potentially allowing a remote attacker to gain unauthorized access to the remote host. Affected produc...
CVE-2005-1608
Multiple unknown vulnerabilities in the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for PostNuke have unknown impact...
CVE-2005-1621
Directory traversal vulnerability in the pnModFunc function in pnMod.php for PostNuke 0.750 through 0.760rc4 allows remote attackers to read arbitrary files via a .. dot dot in the func parameter to index.php...
CVE-2005-1608
Multiple unknown vulnerabilities in the Blocks module in Spidean AutoTheme 1.7 and AT-Lite for PostNuke have unknown impact...
PostNuke 0.750.76 Blocks Module - Directory Traversal
PostNuke 0.750.76 Blocks Module - Directory Traversal source: https://www.securityfocus.com/bid/13636/info PostNuke Blocks module is affected by a directory traversal vulnerability. The problem presents itself when an attacker passes a name for a target file, along with directory traversal...
[Full-disclosure] Postnuke 0.750 - 0.760rc4 local file inclusion
Product : Postnuke 0.750 http://www.postnuke.com Description: Postnuke 0.750 - 0.760rc4 local file inclusion Severity: High Description =========== Postnuke is Web Content Management System written in PHP and using mysql as database backend. Detail ====== Directory traversal in function pnModFunc...
CVE-2004-1949
The CVE concerns PostNuke prior to 7.2.6 with a SQL injection vulnerability that allows remote attackers to run arbitrary SQL. The flaw is triggered by input parameters in two modules: (1) sif in index.php of the Comments module, and (2) timezoneoffset in changeinfo.php of the Your_Account module...
CVE-2004-1957
Multiple cross-site scripting XSS vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web script or HTML via the 1 lid and query parameters to the Downloads module, 2 query parameter to the Weblinks module, or 3 hlpfile parameter to openwindow.php...
CVE-2004-1957
Multiple XSS vulnerabilities affect PostNuke 0.726. Affected vectors include (1) lid and a query parameter to the Downloads module, (2) a query parameter to the Web_links module, and (3) the hlpfile parameter to openwindow.php, enabling remote attackers to inject arbitrary web script or HTML. The...
CVE-2004-1956
PostNuke 0.7.2.6 is affected by CVE-2004-1956. The vulnerability allows remote attackers to cause information disclosure by issuing direct HTTP requests to files in the includes/blocks, pnadodb, NS-NewUser, NS-Your_Account, NS-LostPassword, and NS-User paths, which trigger PHP error messages reve...
CVE-2004-1956
PostNuke 0.7.2.6 allows remote attackers to gain information via a direct HTTP request to files in the 1 includes/blocks directory, 2 pnadodb directory, 3 NS-NewUser module, 4 NS-YourAccount, 5 NS-LostPassword module, or 6 NS-User module which reveals the path to the web server in a PHP error...
CVE-2004-1949
SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via 1 the sif parameter to index.php in the Comments module or 2 timezoneoffset parameter to changeinfo.php in the YourAccount module...