CVE-2006-6795: Undefined Security Weakness

PHP remote file inclusion vulnerability in gallery/displayCategory.php in the MyeGallery 2.5.6 module in myPHPNuke MPN allows remote attackers to execute arbitrary PHP code via a URL in the basepath parameter...

CVE-2006-6795

The CVE describes a PHP remote file inclusion in the My_eGallery 2.5.6 module of myPHPNuke, specifically in gallery/displayCategory.php. The vulnerability allows an attacker to cause arbitrary PHP code execution by supplying a URL in the basepath parameter. This is a server-side RFI risk that cou...

myphpNuke Module My_eGallery 2.5.6 (basepath) RFI Vulnerability

No description provided by source. =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- myPHPNuke Gallery Module basepath Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found: Cyber-Security.Org...

myPHPNuke Module My_eGallery 2.5.6 - basepath Remote File Inclusion

myPHPNuke Module MyeGallery 2.5.6 - basepath Remote File Inclusion =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- myPHPNuke Gallery Module basepath Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=...

myphpNuke Module My_eGallery 2.5.6 (basepath) RFI Vulnerability

Exploit for unknown platform in category web applications =============================================================== myphpNuke Module MyeGallery 2.5.6 basepath RFI Vulnerability ===============================================================...

myPHPNuke Module My_eGallery 2.5.6 - 'basepath' Remote File Inclusion

=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- myPHPNuke Gallery Module basepath Remote File Include =-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=- Found: Cyber-Security.Org...

CVE-2006-0923

Multiple cross-site scripting XSS vulnerabilities in MyPHPNuke MPN 1.88 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the letter parameter in reviews.php and 2 the dcategory parameter in download.php...

Cross site scripting

Multiple cross-site scripting XSS vulnerabilities in MyPHPNuke MPN 1.88 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the letter parameter in reviews.php and 2 the dcategory parameter in download.php...

CVE-2006-0923

CVE-2006-0923 affects MyPHPNuke (MPN) up to version 1.88 and earlier. The vulnerability surfaces as multiple cross-site scripting (XSS) flaws that allow remote attackers to inject arbitrary web script or HTML via (1) the letter parameter in reviews.php and (2) the dcategory parameter in download....

CVE-2006-0923

Multiple cross-site scripting XSS vulnerabilities in MyPHPNuke MPN 1.88 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the letter parameter in reviews.php and 2 the dcategory parameter in download.php...

[SA19052] MyPHPNuke Cross-Site Scripting Vulnerabilities

TITLE: MyPHPNuke Cross-Site Scripting Vulnerabilities SECUNIA ADVISORY ID: SA19052 VERIFY ADVISORY: http://secunia.com/advisories/19052/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: myPHPNuke 1.x http://secunia.com/product/1119/ DESCRIPTION: Mustafa Can Bjorn...

CVE-2006-0923: Undefined Security Weakness

Multiple cross-site scripting XSS vulnerabilities in MyPHPNuke MPN 1.88 and earlier allow remote attackers to inject arbitrary web script or HTML via 1 the letter parameter in reviews.php and 2 the dcategory parameter in download.php...

MyPHPNuke188.txt

--Security Report-- Advisory: MyPHPNuke http://site/reviews.php?op=reviews&letter=XSS EXAMPLE - http://site/reviews.php?op=reviews&letter=alert'X'; GET - http://site/download.php?sortby=&dcategory=XSS&sortby= EXAMPLE - http://site/download.php?sortby=&dcategory=alert'X'; -- Timeline: 24/02/2006:...

Advisory: MyPHPNuke <= 1.8.8 multiple XSS vulnerabilities

--Security Report-- Advisory: MyPHPNuke = 1.8.8 multiple XSS vulnerabilities --- Author: Mustafa Can Bjorn "nukedx a.k.a nuker" IPEKCI --- Date: 24/02/06 05:56 PM --- Contacts: ICQ: 10072 MSN/Email: [email protected] Web: http://www.nukedx.com --- Vendor: MPN www.myphpnuke.com Version: 1.8.8 and...

myPHPNuke 1.8.8 - download.php Cross-Site Scripting

myPHPNuke 1.8.8 - download.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16815/info MyPHPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage the...

myPHPNuke 1.8.8 - reviews.php Cross-Site Scripting

myPHPNuke 1.8.8 - reviews.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16815/info MyPHPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage thes...

myPHPNuke 1.8.8 - 'reviews.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16815/info MyPHPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...

myPHPNuke 1.8.8 - 'download.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16815/info MyPHPNuke is prone to multiple cross-site scripting vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage these issues to have arbitrary script code executed in...

myPHPNuke phptonuke.php Directory Traversal

The version of myPHPNuke installed on the remote host allows anyone to read arbitrary files by passing the full filename to the SPDX-FileCopyrightText: 2003 Michel Arboi Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...

CVE-2002-1913

CVE-2002-1913 affects myPHPNuke 1.8.8 where the PHP file phptonuke.php (filnavn parameter) allows a remote attacker to read arbitrary files via a full pathname. This is a Directory Traversal issue; exploitation requires no authentication and can be triggered by supplying a full file path in filna...