9 matches found
Mini-NUKE 2.3 - Freehost Multiple Vulnerabilities
No description provided by source...
Mini-NUKE 2.3 Freehost - Multiple Vulnerabilities
============================================================================== / \ | | | | / \ | | | | / \ | | | | / \ | || | / \ | | | | / \ | | // \ || || // \ || || ============================================================================== » Note : Forever RevengeHack.Com-Ar-Ge.Org Acildi...
CVE-2006-2732
SQL injection vulnerability in YourAccount.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 yas1, 2 yas2, and 3 yas3 parameters...
Sql injection
SQL injection vulnerability in YourAccount.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 yas1, 2 yas2, and 3 yas3 parameters...
CVE-2006-2734
enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by setting the guvenlik parameter to the same value as the hidden gguvenlik parameter, which bypasses a verification step because the gguvenlik parameter is assumed to be immutable by...
CVE-2006-2733
membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts...
CVE-2006-2732
SQL injection vulnerability in YourAccount.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 yas1, 2 yas2, and 3 yas3 parameters...
CVE-2006-2732
The CVE-2006-2732 entry concerns a SQL injection vulnerability in Mini-Nuke 2.3 and earlier, specifically in Your_Account.asp. The underlying issue is that the parameters yas_1, yas_2, and yas_3 can be manipulated to inject arbitrary SQL, enabling remote command execution on affected installation...
CVE-2006-2734
enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by setting the guvenlik parameter to the same value as the hidden gguvenlik parameter, which bypasses a verification step because the gguvenlik parameter is assumed to be immutable by...