228 matches found
PHP-Nuke <= 7.8 (modules.php) SQL Injection Exploit
No description provided by source. / PHP-Nuke =7.8 SQL injection exploit need MySQL 4.0 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru / // tested on 7.8 include stdio.h include string.h include sys/types.h include sys/socket.h include netinet/in.h include netdb.h include regex.h defi...
CVE-2014-3934: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the SubmitNews module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics parameter to modules.php...
CVE-2010-5083: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the WebLinks module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php...
CVE-2011-1481
CVE-2011-1481 affects PHP-Nuke 8.0 and earlier. The vulnerability is multiple cross-site scripting (XSS) in the Feedback action of modules.php, exploitable via the sender_name or sender_email parameters. Impact described as allowing remote attackers to inject arbitrary web script or HTML. NVD met...
CVE-2011-1481: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 sendername or 2 senderemail parameter in a Feedback action to modules.php...
Proteccion Legal (modules.php) Local File Inclusion
Exploit for php platform in category web applications =================================================== Proteccion Legal modules.php Local File Inclusion =================================================== Author: Net.Edit0r Email : email protected & email protected Google dork :...
APT-WEBSHOP-SYSTEM - modules.php SQL Injection
APT-WEBSHOP-SYSTEM - modules.php SQL Injection =============================================== APT-WEBSHOP-SYSTEM modules.php SQL injection =============================================== / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|...
APT-WEBSHOP-SYSTEM - 'modules.php' SQL Injection
=============================================== APT-WEBSHOP-SYSTEM modules.php SQL injection =============================================== / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|/ // APT-WEBSHOP-SYSTEM modules.php SQL...
PHP-Nuke Module print 6.0 - printsid SQL Injection
PHP-Nuke Module print 6.0 - printsid SQL Injection PHP-Nuke Module print 6.0 print&sid SQL Injection Vulnerability Author : Gamoscu Homepage : www.1923turk.com Blog : http://gamoscu.wordpress.com Script : PHP-Nuke Module print 6.0 Download :...
CVE-2010-1713: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands via the sid parameter in a News article modload action...
CVE-2009-3506
Multiple cross-site scripting XSS vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 cookuser parameter to index.php and the 2 name parameter to modules.php...
CVE-2009-3507
CVE-2009-3507 is a vulnerability in CMSphp 0.21 where a directory traversal via the mod_file parameter allows remote attackers to include and execute arbitrary local files using “..”. This is supported by multiple records (NVD, CVE list, PRION, CVELIST) and aligned with the observed CVSSv2 base s...
CVE-2009-3506: Improper Neutralization of Input During Web Page Generation
Multiple cross-site scripting XSS vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 cookuser parameter to index.php and the 2 name parameter to modules.php...
CVE-2009-3507: Improper Limitation of a Pathname to a Restricted Directory
Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modfile parameter...
Sql injection
SQL injection vulnerability in the MyeGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...
CVE-2008-7038: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the MyeGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...
CVE-2009-2618: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in the Surveys aka NS-Polls module in MDPro MD-Pro 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php...
Sql injection
SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action...
CVE-2008-6866: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in modules.php in the CurrentIssue module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a summary action...
CVE-2008-6865: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action...