Lucene search
+L

228 matches found

seebug.org
seebug.org
•added 2014/07/01 12:00 a.m.•24 views

PHP-Nuke <= 7.8 (modules.php) SQL Injection Exploit

No description provided by source. / PHP-Nuke =7.8 SQL injection exploit need MySQL 4.0 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru / // tested on 7.8 include stdio.h include string.h include sys/types.h include sys/socket.h include netinet/in.h include netdb.h include regex.h defi...

7.1AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2014/06/02 12:00 a.m.•4 views

CVE-2014-3934: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the SubmitNews module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics parameter to modules.php...

7.5CVSS6.4AI score0.02178EPSS
SaveExploits2References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2012/02/14 12:00 a.m.•7 views

CVE-2010-5083: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the WebLinks module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php...

7.5CVSS6.4AI score0.0101EPSS
SaveExploits2References2
CVE
CVE
•added 2011/06/21 1:00 a.m.•83 views

CVE-2011-1481

CVE-2011-1481 affects PHP-Nuke 8.0 and earlier. The vulnerability is multiple cross-site scripting (XSS) in the Feedback action of modules.php, exploitable via the sender_name or sender_email parameters. Impact described as allowing remote attackers to inject arbitrary web script or HTML. NVD met...

4.3CVSS5.9AI score0.01089EPSS
SaveExploits1References3Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2011/06/21 12:00 a.m.•4 views

CVE-2011-1481: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 sendername or 2 senderemail parameter in a Feedback action to modules.php...

4.3CVSS5.9AI score0.01089EPSS
SaveExploits1References2
zdt
zdt
•added 2010/10/09 12:00 a.m.•21 views

Proteccion Legal (modules.php) Local File Inclusion

Exploit for php platform in category web applications =================================================== Proteccion Legal modules.php Local File Inclusion =================================================== Author: Net.Edit0r Email : email protected & email protected Google dork :...

7.1AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/08/02 12:00 a.m.•23 views

APT-WEBSHOP-SYSTEM - modules.php SQL Injection

APT-WEBSHOP-SYSTEM - modules.php SQL Injection =============================================== APT-WEBSHOP-SYSTEM modules.php SQL injection =============================================== / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|...

0.4AI score
SaveExploits0
Exploit DB
Exploit DB
•added 2010/08/02 12:00 a.m.•37 views

APT-WEBSHOP-SYSTEM - 'modules.php' SQL Injection

=============================================== APT-WEBSHOP-SYSTEM modules.php SQL injection =============================================== / // // // \ / // / / // \ / | / |/ / \ \ / / / / / , // / / / / / / , // | / / //// ///||// //////||// ||//|/ // APT-WEBSHOP-SYSTEM modules.php SQL...

5.3AI score
SaveExploits0
exploitpack
exploitpack
•added 2010/06/17 12:00 a.m.•16 views

PHP-Nuke Module print 6.0 - printsid SQL Injection

PHP-Nuke Module print 6.0 - printsid SQL Injection PHP-Nuke Module print 6.0 print&sid SQL Injection Vulnerability Author : Gamoscu Homepage : www.1923turk.com Blog : http://gamoscu.wordpress.com Script : PHP-Nuke Module print 6.0 Download :...

0.6AI score
SaveExploits0
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2010/05/04 12:00 a.m.•4 views

CVE-2010-1713: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules.php in PostNuke 0.764 allows remote attackers to execute arbitrary SQL commands via the sid parameter in a News article modload action...

7.5CVSS6.4AI score0.0199EPSS
SaveExploits2References2
NVD
NVD
•added 2009/10/01 2:30 p.m.•28 views

CVE-2009-3506

Multiple cross-site scripting XSS vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 cookuser parameter to index.php and the 2 name parameter to modules.php...

4.3CVSS5.8AI score0.01271EPSS
SaveExploits1References2
CVE
CVE
•added 2009/10/01 2:00 p.m.•60 views

CVE-2009-3507

CVE-2009-3507 is a vulnerability in CMSphp 0.21 where a directory traversal via the mod_file parameter allows remote attackers to include and execute arbitrary local files using “..”. This is supported by multiple records (NVD, CVE list, PRION, CVELIST) and aligned with the observed CVSSv2 base s...

7.5CVSS7.1AI score0.02346EPSS
SaveExploits1References2Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/10/01 12:00 a.m.•4 views

CVE-2009-3506: Improper Neutralization of Input During Web Page Generation

Multiple cross-site scripting XSS vulnerabilities in CMSphp 0.21 allow remote attackers to inject arbitrary web script or HTML via the 1 cookuser parameter to index.php and the 2 name parameter to modules.php...

4.3CVSS5.9AI score0.01271EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/10/01 12:00 a.m.•3 views

CVE-2009-3507: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in modules.php in CMSphp 0.21 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modfile parameter...

7.5CVSS6.3AI score0.02346EPSS
SaveExploits1References2
Prion
Prion
•added 2009/08/24 10:30 a.m.•23 views

Sql injection

SQL injection vulnerability in the MyeGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...

7.5CVSS9.1AI score0.01154EPSS
SaveExploits3References6
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/08/24 12:00 a.m.•6 views

CVE-2008-7038: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the MyeGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect...

7.5CVSS6.4AI score0.01154EPSS
SaveExploits3References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/27 12:00 a.m.•5 views

CVE-2009-2618: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Surveys aka NS-Polls module in MDPro MD-Pro 1.083.x allows remote attackers to execute arbitrary SQL commands via the pollID parameter in a results action to modules.php...

7.5CVSS6.4AI score0.00961EPSS
SaveExploits2References2
Prion
Prion
•added 2009/07/14 2:30 p.m.•21 views

Sql injection

SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action...

7.5CVSS9.1AI score0.01125EPSS
SaveExploits1References3
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/14 12:00 a.m.•4 views

CVE-2008-6866: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules.php in the CurrentIssue module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a summary action...

7.5CVSS6.4AI score0.01125EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2009/07/14 12:00 a.m.•4 views

CVE-2008-6865: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage action...

7.5CVSS6.4AI score0.01125EPSS
SaveExploits1References2
Rows per page
Query Builder