13 matches found
MiracleLinux 8 : patch-2.7.6-11.el8 (AXSA:2020-262:01)
The remote MiracleLinux 8 host has a package installed that is affected by a vulnerability as referenced in the AXSA:2020-262:01 advisory. patch: the following of symlinks in inp.c and util.c is mishandled in cases other than input files CVE-2019-13636 Tenable has extracted the preceding...
EUVD-2006-3941
Malware in sbrugna...
MAL-2025-32071 Malicious code in remote-inp (npm)
The package remote-inp was found to contain malicious code...
Malicious code in remote-inp (npm)
The package remote-inp was found to contain malicious code...
SUSE CVE-2019-13636
In GNU patch through 2.7.6, the following of symlinks is mishandled in certain cases other than input files. This affects inp.c and util.c...
PHPNuke INP Modules.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19208/info PHPNuke INP is prone to a cross-site scripting vulnerability that affects the 'modules.php' script. The specific version affected is currently unknown...
CVE-2007-4822
Cross-site request forgery CSRF vulnerability in the device management interface in Buffalo AirStation WHR-G54S 1.20 allows remote attackers to make configuration changes as an administrator via HTTP requests to certain HTML pages in the res parameter with an inp req parameter to cgi-bin/cgi, as...
CVE-2006-6274
Summary: CVE-2006-6274 describes a SQL injection in the articles.asp path of Expinion.net iNews (Publisher/iNP) v2.5 and earlier, with possible scope to News Manager. The root cause is unsafely constructed SQL via the ex parameter, enabling remote attackers to execute arbitrary SQL commands. The ...
CVE-2006-6180
CVE-2006-6180 is a reflected cross-site scripting vulnerability in articles.asp of Expinion.net iNews Publisher (iNP) 2.5 and earlier, triggered by the hl parameter. Root cause: improper sanitization of user input allowing arbitrary script/HTML injection. Impact: partial confidentiality, integrit...
phpnukeXSSaria.txt
---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon Gr33t to: O.U.T.L.A.W & A.u.r.a & DrtRp & Cl0wn ----------------------------------------------------------- Software: PHP-Nuke INP Description: PHP-Nuke INP is the modified version of...
CVE-2006-3948
Technical details for CVE-2006-3948 are not publicly available in the provided connected documents. Monitor for updates.
PHP-Nuke INP XSS
---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon www.Aria-security.net Gr33t to: O.U.T.L.A.W & A.u.r.a & DrtRp & Cl0wn ----------------------------------------------------------- Software: PHP-Nuke INP Description: PHP-Nuke INP is the...
PHP-Nuke - 'INP modules.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19208/info PHPNuke INP is prone to a cross-site scripting vulnerability that affects the 'modules.php' script. The specific version affected is currently unknown. http://www.example.com/path/modules.php?name=Downloads&op=search&query=alert'ARIA'...