589 matches found
PostNuke Members_List Module Information Disclosure
The remote host is running PostNuke. It is possible to use the CMS to determine the full path to its installation on the server or the name of the database used, by doing a request like : /modules.php?op=modload&name=MembersList&file=index&letter=All&sortby=foobar An attacker may use these flaws ...
postnuke723.txt
Products: Postnuke v 0.723 http://www.postnuke.com Date: 09 March 2003 Author: pokleyzz Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: Postnuke v 0.723 SQL injection and directory traversing Description...
CVE-2002-1996
Cross-site scripting XSS vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the 1 name parameter in modules.php and 2 catid parameter in index.php...
CVE-2002-2015
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter...
XSS in Postnuke Rogue release (0.72)
Program: Postnuke Rogue release 0.72 Latest. HomePage: www.Postnuke.com/.org Description: PostNuke is a weblog/Content Management System CMS. Whilst PostNuke is a fork of PHP-Nuke, the entire core of the product has been replaced, making it far more secure and stable, and able to work in...
The Books Module for the PostNuke CMS XSS Vulnerability
---------------------------------------------------- Class : input Validation Error Risk : Due to the simplicity of the attack and the number of sites that run module books the risk is classified as Medium to High. URL: Http://pn-mod-books.sourceforge.net -...
Michael Schatz Books 0.54/0.6 PostNuke Module - Cross-Site Scripting
source: https://www.securityfocus.com/bid/5882/info Books is a module written for PostNuke. Reportedly, Books is prone to cross site scripting attacks. An attacker may exploit this vulnerability by enticing a victim user to follow a malicious link containing HTML and script code. The...
PHP-Nuke x.x AND PostNuke SQL Injection
Hello again, just to say that PostNuke fork of PHP-Nuke is vulnerable to the same bugs AND it is possible to inject different SQL code in order to do other "funny" but "dangerous" things. Note to the guys of those projects: Filter those URL entries!!! Cheers, Pedro Inacio...
PostNuke does not adequately validate user input thereby allowing malicious user to bypass user authentication via SQL injection
Overview PostNuke does not adequately filter user input, allowing arbitrary MySQL query execution and user authentication without password. Description PostNuke is a web content management system based on PHPNuke, written in PHP. The article.php component of PostNuke versions 0.62, 0.63, and 06.4...
PostNuke 0.72 - modules.php Cross-Site Scripting
PostNuke 0.72 - modules.php Cross-Site Scripting source: https://www.securityfocus.com/bid/5809/info A cross site scripting vulnerability has been reported for PostNuke. An attacker may exploit this vulnerability by enticing a victim user to follow a malicious link. Attacker-supplied HTML and...
PostNuke 0.72 - 'modules.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/5809/info A cross site scripting vulnerability has been reported for PostNuke. An attacker may exploit this vulnerability by enticing a victim user to follow a malicious link. Attacker-supplied HTML and script code may be executed on a web client in the...
CVE-2002-1070
Technical details (affected product/version, root cause, impact, fixes) are not publicly provided in the supplied connected documents. Monitor for updates.
CVE-2002-1070: Undefined Security Weakness
Cross-site scripting vulnerability in PHPWiki Postnuke wiki module allows remote attackers to execute script as other PHPWiki users via the pagename parameter...
Wiki module postnuke Cross Site Scripting Vulnerability
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ---------------------------------------------------- Class : input Validation Error Risk : Due to the simplicity of the attack and the number of sites that run phpwiki, the risk is classified as Medium to High. -...
Crossite scripting in PHPNuke/PostNUKE
No description provided...
postnuke v 0.7.0.3 remote command execution
post nuke is one of popular content management system written in php . there are bug in file user.php line 107 which user can append $caselist array with their own value. foreach $caselist as $k=$v $ModName = $v'module'; include "$vpath/$k"; $caselist = array;...
PostNuke 0.703 - caselist Arbitrary Module Include
source: https://www.securityfocus.com/bid/4381/info PostNuke is a content management system originally forked from the PHP-Nuke project. It is implemented in PHP, and available for Windows, Linux and other Unix based systems. A vulnerability has been reported in some versions of PostNuke...
PostNuke 0.703 - caselist Arbitrary Module Include
PostNuke 0.703 - caselist Arbitrary Module Include source: https://www.securityfocus.com/bid/4381/info PostNuke is a content management system originally forked from the PHP-Nuke project. It is implemented in PHP, and available for Windows, Linux and other Unix based systems. A vulnerability has...
PostNuke Bugged
Hi everyone, this post is 4 weeks after the original information was made available to the developers, allowing time for many effected users to patch and also the developers to fix / check newer versions. --------- rookidd found another set of vulnerabilities in postnuke, this time in version 7.0...