97 matches found
CVE-2002-1913: Undefined Security Weakness
phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable...
CYBSEC - PHPMailer Infinite Loop Denial of Service
CYBSEC S.A. www.cybsec.com Advisory Name: PHPMailer Infinite Loop Denial of Service ============== Vulnerability Class: Denial of Service ==================== Release Date: 05.27.2005 ============= Affected Applications: ====================== PHPMailer = 1.72 Affected Platforms:...
myPHPnuke displayCategory.php Remote Command Execution (deprecated)
Binary data 1598.prm...
CVE-2003-1372
Cross-site scripting XSS vulnerability in links.php script in myPHPNuke 1.8.8, and possibly earlier versions, allows remote attackers to inject arbitrary HTML and web script via the 1 ratenum or 2 query parameters...
Vulnrability in myPHPnuke 1.8.8
Language : PHP Script : http://www.myphpnuke.com 1.8.8 Problem : SQL Injection Description : myphpnuke is a widely used Content Managemnt System. Problem : In auth.inc.php file, if isset$aid && isset$pwd && $op == "login" if$aid!="" AND $pwd!="" $q="select pwd from ".$mpnTables'authors'." where...
myPHPNuke 1.8.8 - auth.inc.php SQL Injection
myPHPNuke 1.8.8 - auth.inc.php SQL Injection source: https://www.securityfocus.com/bid/8663/info It has been reported that myPHPNuke is prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into database queries. The issue may exist in the...
myPHPNuke 1.8.8 - 'auth.inc.php' SQL Injection
source: https://www.securityfocus.com/bid/8663/info It has been reported that myPHPNuke is prone to a SQL injection vulnerability that may allow a remote attacker to inject malicious SQL syntax into database queries. The issue may exist in the auth.in.php module of the software. The cause of this...
myPHPNuke.txt
Informations : °°°°°°°°°°°°° Language : PHP Version : 1.8.87 Website : http://www.myphpnuke.com Problems : - Upload/Copy/Include Files PHP Code/Location : °°°°°°°°°°°°°°°°°°° gallery/displayCategory.php : ------------------------------------------ ... attach;"; else die"No input file specified";...
myPHPNuke My_eGallery gallery/displayCategory.php basepath Parameter Remote File Inclusion
The remote web server appears to be running myPHPNuke. The installed version is affected by a remote file include vulnerability in the 'gallery/displayCategory.php' script. An attacker may use this flaw to inject arbitrary code in the remote host and gain a shell with the privileges of the web...
myPHPNuke phptonuke.php filnavn Parameter Traversal Arbitrary File Access
The version of myPHPNuke installed on the remote host allows anyone to read arbitrary files by passing the full filename to the 'filnavn' argument of the 'phptonuke.php' script. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Status: it was not tested against a vulnerable host, and the...
myPHPNuke 1.8.8 - 'links.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/6892/info Reportedly, myPHPNuke 'links.php' does not adequately filter HTML code thus making it prone to cross-site scripting attacks. It is possible for a remote attacker to create a malicious link containing script code that will be executed in the...
myphpnuke xss
Vendor: http://www.myphpnuke.com Subject: myphpnuke links.php vulnerability myphpnuke is a website portal tool written in php. There are many Cross Site Scripting issue on myphpnuke . Example: http://WEB/myphpnuke/links.php?op=MostPopular&ratenum=scr!ptalertdocument.cookie;/scr!pt&ratetype=percen...
myPHPNuke 1.8.8 - links.php Cross-Site Scripting
myPHPNuke 1.8.8 - links.php Cross-Site Scripting source: https://www.securityfocus.com/bid/6892/info Reportedly, myPHPNuke 'links.php' does not adequately filter HTML code thus making it prone to cross-site scripting attacks. It is possible for a remote attacker to create a malicious link...
phpmynuke css and phpinfo() vuls
myphpnuke version 1.8.8final7 and prior that contain sysinfo are vulnerable to both css attack and phpinfo Disclosure. The problem is that unlike the rest of the scripts under /admin/, sysinfo's footer script called systemfooter.php does not check who the user is. Inside systemfooter.php the...
myPHPNuke 1.8.8 - Default_Theme Cross-Site Scripting
myPHPNuke 1.8.8 - DefaultTheme Cross-Site Scripting source: https://www.securityfocus.com/bid/6544/info Reportedly, myPHPNuke does not adequately filter HTML code thus making it prone to cross-site scripting attacks. It is possible for a remote attacker to create a malicious link containing scrip...
myPHPNuke 1.8.8 - 'Default_Theme' Cross-Site Scripting
source: https://www.securityfocus.com/bid/6544/info Reportedly, myPHPNuke does not adequately filter HTML code thus making it prone to cross-site scripting attacks. It is possible for a remote attacker to create a malicious link containing script code which will be executed in the browser of a...