30 matches found
EUVD-2010-2368
Malware in sbrugna...
Nakid CMS Cross-Site Request Forgery Vulnerability
Nakid CMS is an open source content management system CMS based on PHP and CodeIgniter. Nakid CMS suffers from a cross-site request forgery vulnerability. The vulnerability allows attackers to perform unauthorized operations...
Nakid CMS HTML Injection Vulnerability
Nakid CMS is an open source content management system CMS based on PHP and CodeIgniter. Nakid CMS suffers from an HTML injection vulnerability that could be exploited to allow an attacker to execute supplied HTML and script code in the context of an affected browser, which could allow an attacker...
Nakid CMS Local File Inclusion Vulnerability
Nakid CMS is an open source content management system CMS based on PHP and CodeIgniter. Nakid CMS suffers from a local file inclusion vulnerability that allows an attacker to read arbitrary files...
Nakid CMS CSRF / XSS / Local File Inclusion
Credits: John Page hyp3rlinx + Domains: hyp3rlinx.altervista.org + Source: http://hyp3rlinx.altervista.org/advisories/AS-NAKIDCMS0611.txt Vendor: ================================ http://kilrizzy.github.io/Nakid-CMS/ Product: ================================ kilrizzy-Nakid-CMS-f274624 Nakid CMS is...
Nakid CMS - Multiple Vulnerabilities
Exploit Title: CSRF, Persistent XSS & LFI Google Dork: intitle: CSRF, Persistent XSS & LFI Date: 2015-06-11 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: kilrizzy.github.io/Nakid-CMS Software Link: kilrizzy.github.io/Nakid-CMS Version:...
Nakid CMS - Multiple Vulnerabilities
Nakid CMS - Multiple Vulnerabilities Exploit Title: CSRF, Persistent XSS & LFI Google Dork: intitle: CSRF, Persistent XSS & LFI Date: 2015-06-11 Exploit Author: John Page hyp3rlinx Website: hyp3rlinx.altervista.org Vendor Homepage: kilrizzy.github.io/Nakid-CMS Software Link:...
Nakid CMS (fckeditor) Remote Arbitrary File Upload Exploit
No description provided by source. ?php / Title: Nakid CMS fckeditor Remote Arbitrary File Upload Exploit Developers: www.nakid.org Download : https://sourceforge.net/projects/nakidcms/files/Nakid%20CMS%20v052.rar/download Version: 0.5.2 exploited by ..: eidelweiss details..: works with an Apache...
Nakid CMS 0.5.2 - Remote File Inclusion Exploit
No description provided by source. Nakid CMS 0.5.2 Remote Include Exploit Found by sh00t0ut Expl: http://victim/modules/catalog/uploadphoto.php?coresystempath=evil script...
Nakid CMS 1.0.2 Cross Site Scripting
------------------------------------------------------------------------ Software................Nakid CMS 1.0.2 Vulnerability...........Reflected Cross-site Scripting Threat Level............Low 1/5 Download................http://www.nakid.org/ Discovery Date..........6/1/2011 Tested...
Nakid CMS 1.0.2 - CKEditorFuncNum Cross-Site Scripting
Nakid CMS 1.0.2 - CKEditorFuncNum Cross-Site Scripting source: https://www.securityfocus.com/bid/48109/info Nakid CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code...
Nakid CMS 1.0.2 - 'CKEditorFuncNum' Cross-Site Scripting
source: https://www.securityfocus.com/bid/48109/info Nakid CMS is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied data. An attacker may leverage this issue to execute arbitrary script code in the browser of an unsuspecting user in the context ...
Nakid CMS 'core[system_path]' Parameter Remote File Inclusion Vulnerability
This host is running Nakid CMS and is prone to remote file inclusion vulnerability. OpenVAS Vulnerability Test $Id: secpodnakidcmsrfivuln.nasl 5394 2017-02-22 09:22:42Z teissa $ Nakid CMS 'coresystempath' Parameter Remote File Inclusion Vulnerability Authors: Madhuri D Copyright: Copyright c 2010...
Nakid CMS Detection (HTTP)
HTTP based detection of Nakid CMS. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.902083";...
Nakid CMS <= 0.5.2 RFI Vulnerability
Nakid CMS is prone to a remote file inclusion RFI vulnerability. Copyright C 2010 Greenbone Networks GmbH Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later This program is free...
Nakid CMS 0.5.2 fckeditor upload and remote file inclusion vulnerability-vulnerability warning-the black bar safety net
Nakid CMS exist two vulnerabilities, which is fckeditor editor file upload vulnerability, followed by image upload page uploadphoto. php remote file inclusion vulnerability. A: fckeditor editor file upload vulnerability Vulnerability file:...
CVE-2010-2358
PHP remote file inclusion vulnerability in modules/catalog/uploadphoto.php in Nakid CMS 0.5.2, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the coresystempath parameter. NOTE: some of these details are obtained...
Remote file inclusion
PHP remote file inclusion vulnerability in modules/catalog/uploadphoto.php in Nakid CMS 0.5.2, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the coresystempath parameter. NOTE: some of these details are obtained...
CVE-2010-2358
Nakid CMS is affected by a remote file inclusion vulnerability in the core[system_path] parameter for version 0.5.2. When magic_quotes_gpc is disabled and register_globals is enabled, an attacker could cause the execution of arbitrary PHP code via a crafted URL. This CVE is documented across mult...
CVE-2010-2358
PHP remote file inclusion vulnerability in modules/catalog/uploadphoto.php in Nakid CMS 0.5.2, when magicquotesgpc is disabled and registerglobals is enabled, allows remote attackers to execute arbitrary PHP code via a URL in the coresystempath parameter. NOTE: some of these details are obtained...