EUVD-2010-5005

Malware in sbrugna...

EUVD-2010-5004

Malware in sbrugna...

CVE-2010-5040

PHP remote file inclusion vulnerability in nucleus/plugins/NPgallery.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIRNUCLEUS parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5040

PHP remote file inclusion vulnerability in nucleus/plugins/NPgallery.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIRNUCLEUS parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5041

SQL injection vulnerability in index.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action...

Sql injection

SQL injection vulnerability in index.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action...

Remote file inclusion

PHP remote file inclusion vulnerability in nucleus/plugins/NPgallery.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIRNUCLEUS parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5040

PHP remote file inclusion vulnerability in nucleus/plugins/NPgallery.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary PHP code via a URL in the DIRNUCLEUS parameter. NOTE: some of these details are obtained from third party information...

CVE-2010-5040

The CVE-2010-5040 entry describes a PHP remote file inclusion in the NP_Gallery plugin (NP_gallery.php) for Nucleus CMS, version 0.94. The vulnerability arises from the DIR_NUCLEUS parameter allowing an attacker to supply a URL and execute arbitrary PHP code on the affected system. The available ...

CVE-2010-5041

SQL injection vulnerability in index.php in the NPGallery plugin 0.94 for Nucleus allows remote attackers to execute arbitrary SQL commands via the id parameter in a plugin action...

CVE-2010-5041

CVE-2010-5041 describes an SQL injection in the NP_Gallery plugin 0.94 for Nucleus, exploitable via the id parameter in a plugin action on index.php. This is a remote code execution risk on vulnerable installations, enabling arbitrary SQL commands. The available documents do not provide explicit ...