CVE-2007-1633: Undefined Security Weakness

Directory traversal vulnerability in bbcoderef.php in the Giorgio Ciranni Splatt Forum 4.0 RC1 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the name parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log...

PHP-Nuke Module splattforum 4.0 RC1 Local File Inclusion Exploit

Exploit for unknown platform in category web applications ================================================================ PHP-Nuke Module splattforum 4.0 RC1 Local File Inclusion Exploit ================================================================ !/usr/bin/perl Modulo Splatt Forum v4.0...

PHP-Nuke Module splattforum 4.0 RC1 - Local File Inclusion

!/usr/bin/perl Modulo Splatt Forum v4.0 RC1bbcoderef.php nameLocal File Include Exploit D.Script: http://sourceforge.net/projects/splattforum/ V.Code $modulename = $name; -------- Line : 17 include"modules/".$modulename."/functions.php"; -------- Line : 19 Dork: "Splatt Forum©" Discovered & Coded...

CVE-2001-0320: Undefined Security Weakness

bbsmilies.php and bbcoderef.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. dot dot sequences into a malformed username argument...