CVE-2006-2733

CVE-2006-2733 affects Mini-Nuke 2.3 and earlier. The issue is in membership.asp where plaintext security codes are used, allowing remote attackers to register multiple times via automated scripts. The connected documents confirm the product/version range and the vulnerability mechanism; no mitiga...

CVE-2006-2733

membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts...

CVE-2006-2733: Undefined Security Weakness

membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts...

minimuke.pl.txt

I create exploit for a bug at Mininuke ; this bug at "membership.asp" and you can with this exploit change members password : if you inject: " /membership.asp&pass=New password&passa=confirm new password&x=member name " This bug found by nukedx & exploit by Hessam-x --------- + APP name : Mininuk...

[xpl#2] MiniNuke 1.8.2 - change member's passwrod < Perl >

I create exploit for a bug at Mininuke ; this bug at "membership.asp" and you can with this exploit change members password : if you inject: " /membership.asp&pass=New password&passa=confirm new password&x=member name " This bug found by nukedx & exploit by Hessam-x --------- + APP name : Mininuk...

CVE-2006-0203: Improper Input Validation

membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the passwords of other members via a lostpassnew action with a modified x parameter...