90 matches found
myphpnukepfp-sql.txt
SQL Injection vulnerability in myPHPNuke By MustLive http://websecurity.com.ua Detailed information: http://websecurity.com.ua/2398/ Description: There is SQL Injection vulnerability in printfeature.php in myPHPNuke. SQL Injection:...
myPHPNuke < 1.8.8_8rc2 (artid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ========================================================== myPHPNuke 1.8.88rc2 artid SQL Injection Vulnerability ========================================================== SQL Injection vulnerability in myPHPNuke Description: There is SQL...
SQL Injection vulnerability in myPHPNuke
Здравствуйте 3APA3A! Сообщаю вам о найденной мною SQL Injection уязвимости в системе myPHPNuke. SQL Injection: http://site/article.php?sid=-120union20select20null,null,null,null,aid,pwd,null,null,null20from20mpnauthors20limit200,1 Уязвимы версии до myPHPNuke 1.8.88rc2 а в последней версии системы...
myPHPNuke 1.8.8_8rc2 - artid SQL Injection
myPHPNuke 1.8.88rc2 - artid SQL Injection SQL Injection vulnerability in myPHPNuke By MustLive http://websecurity.com.ua Detailed information: http://websecurity.com.ua/2398/ Description: There is SQL Injection vulnerability in printfeature.php in myPHPNuke. SQL Injection:...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. myPHPNuke: SQL injection...
myPHPNuke < 1.8.8_8rc2 - 'artid' SQL Injection
SQL Injection vulnerability in myPHPNuke By MustLive http://websecurity.com.ua Detailed information: http://websecurity.com.ua/2398/ Description: There is SQL Injection vulnerability in printfeature.php in myPHPNuke. SQL Injection:...
XSS and SQL Injection vulnerabilities in myPHPNuke
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting и SQL Injection уязвимостях в системе myPHPNuke. XSS: http://site/print.php?sid=3CBODY20onload=alertdocument.cookie3E SQL Injection:...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. FeedBurner FeedSmith: crossite scripting, information leak. myPHPNuke: crossite scripting, SQL injection...
myPHPNuke 1.8.8_8rc2 - Cross-Site Scripting SQL Injection
myPHPNuke 1.8.88rc2 - Cross-Site Scripting SQL Injection Cross-Site Scripting and SQL Injection vulnerabilities in myPHPNuke By MustLive http://websecurity.com.ua Detailed information: http://websecurity.com.ua/2391/ Description: There are Cross-Site Scripting and SQL Injection vulnerabilities in...
myPHPNuke < 1.8.8_8rc2 (XSS/SQL) Multiple Remote Vulnerabilities
Exploit for unknown platform in category web applications ================================================================ myPHPNuke 1.8.88rc2 XSS/SQL Multiple Remote Vulnerabilities ================================================================ Cross-Site Scripting and SQL Injection...
myPHPNuke < 1.8.8_8rc2 - Cross-Site Scripting / SQL Injection
Cross-Site Scripting and SQL Injection vulnerabilities in myPHPNuke By MustLive http://websecurity.com.ua Detailed information: http://websecurity.com.ua/2391/ Description: There are Cross-Site Scripting and SQL Injection vulnerabilities in print.php in myPHPNuke. XSS:...
myphpnuke-sqlxss.txt
Cross-Site Scripting and SQL Injection vulnerabilities in myPHPNuke By MustLive http://websecurity.com.ua Detailed information: http://websecurity.com.ua/2391/ Description: There are Cross-Site Scripting and SQL Injection vulnerabilities in print.php in myPHPNuke. XSS:...
Vulnerabilities in myPHPNuke
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Insufficient Anti-automation и Cross-Site Scripting уязвимостях в myPHPNuke. Insufficient Anti-Automation: Уязвимость на http://site/user.php?op=register. http://websecurity.com.ua/uploads/2008/myPHPNuke20Insuficient20Anti-automation.html XSS:...
Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)
PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. myPHPNuke: crossite scripting, automation protection bypass...
CVE-2003-1372
CVE-2003-1372 is an XSS vulnerability affecting myPHPNuke 1.8.8 (and possibly earlier) in the links.php script. The issue allows remote attackers to inject arbitrary HTML and client-side scripts via the (1) ratenum or (2) query parameters, enabling cross-site scripting. The available connected so...
CVE-2003-1372
Cross-site scripting XSS vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the 1 ratenum or 2 query parameters...
CVE-2006-6795
The CVE describes a PHP remote file inclusion in the My_eGallery 2.5.6 module of myPHPNuke, specifically in gallery/displayCategory.php. The vulnerability allows an attacker to cause arbitrary PHP code execution by supplying a URL in the basepath parameter. This is a server-side RFI risk that cou...
myphpNuke Module My_eGallery 2.5.6 (basepath) RFI Vulnerability
No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- myPHPNuke Gallery Module basepath Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found: Cyber-Security.Org...
myPHPNuke Module My_eGallery 2.5.6 - basepath Remote File Inclusion
myPHPNuke Module MyeGallery 2.5.6 - basepath Remote File Inclusion =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- myPHPNuke Gallery Module basepath Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...
myphpNuke Module My_eGallery 2.5.6 (basepath) RFI Vulnerability
Exploit for unknown platform in category web applications =============================================================== myphpNuke Module MyeGallery 2.5.6 basepath RFI Vulnerability ===============================================================...