CVE-2008-1873

CVE-2008-1873 is a cross-site scripting (XSS) vulnerability in Nuke ET’s private message feature affecting Nuke ET 3.2 and 3.4. The flaw allows remote authenticated users to inject arbitrary script/HTML via a CSS property in the STYLE attribute of a DIV element within the mensaje parameter, with ...

CVE-2008-1873: Improper Neutralization of Input During Web Page Generation

Cross-site scripting XSS vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Explorer, allows remote authenticated users to inject arbitrary web script or HTML via a CSS property in the STYLE attribute of a DIV element in the mensaje parameter. NOTE: some of...

Cross site request forgery (csrf)

Multiple cross-site request forgery CSRF vulnerabilities in Nuke ET 3.2 and 3.4 allow remote attackers to perform actions as administrators, as demonstrated by inserting an XSS sequence into a document...

CVE-2008-1719

Multiple cross-site request forgery CSRF vulnerabilities in Nuke ET 3.2 and 3.4 allow remote attackers to perform actions as administrators, as demonstrated by inserting an XSS sequence into a document...

CVE-2008-1719

CVE-2008-1719 affects Nuke ET versions 3.2 and 3.4. The issue consists of multiple CSRF vulnerabilities that could allow remote attackers to perform actions as administrators, demonstrated via inserting an XSS sequence into a document. The provided documents do not specify a remediation or patch ...

CVE-2008-1719: Cross-Site Request Forgery (CSRF)

Multiple cross-site request forgery CSRF vulnerabilities in Nuke ET 3.2 and 3.4 allow remote attackers to perform actions as administrators, as demonstrated by inserting an XSS sequence into a document...

Nuke ET 3.4 - mensaje HTML Injection

Nuke ET 3.4 - mensaje HTML Injection source: https://www.securityfocus.com/bid/28614/info Nuke ET is prone to an HTML-injection vulnerability because it fails to sufficiently sanitize user-supplied input data. Attackers will likely require access to a user account to perform attacks. Exploiting...

Remote file inclusion

PHP remote file inclusion vulnerability in incACVS/SOAP/Transport.php in Accueil et Conseil en Visites et Sejours Web Services ACVSWS PHP5 ACVSWSPHP5 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the CheminInclude parameter...

CVE-2007-2202: Undefined Security Weakness

PHP remote file inclusion vulnerability in incACVS/SOAP/Transport.php in Accueil et Conseil en Visites et Sejours Web Services ACVSWS PHP5 ACVSWSPHP5 1.0 allows remote attackers to execute arbitrary PHP code via a URL in the CheminInclude parameter...

CVE-2007-1925

The CVE-2007-1925 entry affects Tru-Zone Nuke ET 3.4 before fix 7, where the borrado function in modules/Your_Account/index.php does not verify that account deletion requests originate from the account owner. This allows remote authenticated users to delete arbitrary accounts by modifying cookies...

CVE-2007-1925: Undefined Security Weakness

The borrado function in modules/YourAccount/index.php in Tru-Zone Nuke ET 3.4 before fix 7 does not verify that account deletion requests come from the account owner, which allows remote authenticated users to delete arbitrary accounts via a modified cookie...

CVE-2006-2236: Undefined Security Weakness

Buffer overflow in the Quake 3 Engine, as used by 1 ET 2.60, 2 Return to Castle Wolfenstein 1.41, and 3 Quake III Arena 1.32b allows remote attackers to execute arbitrary commands via a long remapShader command...

NukeETSQL32.txt

Nuke ET 'search' module 'query' variable SQL injection Vendor url: www.truzone.org exploit available:yes vendor notify:yes advisore:http://lostmon.blogspot.com/2005/11/ nuke-et-search-module-query-variable.html Nuke ET have a flaw which can be exploited by malicious people to conduct SQL injectio...

[SA17638] Nuke ET "query" SQL Injection Vulnerability

TITLE: Nuke ET "query" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA17638 VERIFY ADVISORY: http://secunia.com/advisories/17638/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Nuke ET 3.x http://secunia.com/product/5075/ DESCRIPTION: Lostmon has...

CVE-2005-3748

SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter...

CVE-2005-3748

SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter...

CVE-2005-3748

CVE-2005-3748 describes an SQL injection in the Search module of Tru-Zone Nuke ET 3.2 (and possibly earlier versions). The vulnerability allows remote attackers to manipulate the database by injecting SQL via the query parameter. The NVD entry records a CVSS v2 base score of 7.5 (HIGH) with netwo...

CVE-2005-3748: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter...

Tru-Zone Nuke ET 3.x - Search Module SQL Injection

Tru-Zone Nuke ET 3.x - Search Module SQL Injection source: https://www.securityfocus.com/bid/15519/info Nuke ET is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful...

Tru-Zone Nuke ET 3.x - Search Module SQL Injection

source: https://www.securityfocus.com/bid/15519/info Nuke ET is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...