EUVD-2007-1620

Malware in sbrugna...

EUVD-2022-5852

Malicious code in bioql PyPI...

Remote file inclusion

PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

CVE-2007-1626

PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

CVE-2007-1626

PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP code via a URL in the file parameter...

CVE-2007-1626

The CVE-2007-1626 entry documents a PHP remote file inclusion in the iFrame Module for PHP-Nuke, specifically iframe.php, where an attacker can cause arbitrary PHP code execution by supplying a URL in the file parameter. Affected component: iFrame module for PHP-Nuke; vulnerability type: remote f...

PHP-Nuke IFrame Module IFrame.PHP远程文件包含漏洞

PHP-Nuke IFrame Module是一款基于PHP的WEB应用程序。 PHP-Nuke IFrame Module不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'IFrame.PHP'脚本对用户提交的'file'参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 PHP-Nuke iFrame Module 目前没有解决方案提供： http://phpnuke.org/modules.php?name=Downloads&dop=viewdownload&cid=3...

Cross site scripting

Cross-site scripting XSS vulnerability in the IFrame module before 03.02.01 for DotNetNuke DNN allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."...

CVE-2007-0660

Cross-site scripting XSS vulnerability in the IFrame module before 03.02.01 for DotNetNuke DNN allows remote attackers to inject arbitrary web script or HTML via unspecified vectors related to "Pass through values."...

CVE-2007-0660

The CVE-2007-0660 issue affects the DotNetNuke (DNN) IFrame module prior to version 03.02.01. The vulnerability stems from improper validation of user-supplied input in the pass-through values, leaving them unfiltered and susceptible to XSS. A remote attacker can exploit this by using crafted URL...