Nucleus CMS 3.22 - DIR_LIBS Remote File Inclusion

Nucleus CMS 3.22 - DIRLIBS Remote File Inclusion !/usr/bin/php -q -d shortopentag=on ? echo "Nucleus = 3.22 arbitrary remote inclusion exploit\r\n"; echo "by rgod [email protected]\r\n"; echo "site: http://retrogod.altervista.org\r\n\r\n"; echo "this is called the "deadly eyes of Sun-tzu"\r\n";...

Nucleus CMS 3.22 - 'DIR_LIBS' Remote File Inclusion

!/usr/bin/php -q -d shortopentag=on \r\n"; die; / software site: http://nucl...

[SA16460] Nucleus CMS XML-RPC Nested XML Tags PHP Code Execution

---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...

XML-RPC for PHP Remote Code Injection Vulnerability

Description XML-RPC for PHP is affected by a remote code-injection vulnerability. An attacker may exploit this issue to execute arbitrary commands or code in the context of the webserver. This may facilitate various attacks, including unauthorized remote access. XML-RPC for PHP 1.1 and prior...

CVE-2004-2056

Summary: CVE-2004-2056 is a SQL injection vulnerability in Nucleus CMS 3.01, affecting action.php via the itemid parameter. What is affected: Nucleus CMS 3.01 (action.php) — SQL injection via itemid. Root cause and impact (as stated): The vulnerability allows an attacker to execute arbitrary SQL ...

CVE-2004-2056

SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute arbitrary SQL statements via the itemid parameter...

CVE-2004-2056

SQL injection vulnerability in action.php in Nucleus CMS 3.01 allows remote attackers to execute arbitrary SQL statements via the itemid parameter...

Nucleus CMS < 3.15 Multiple Vulnerabilities

The remote host is running Nucleus CMS, an open source content management system. The remote version of this software is vulnerable to various flaws that may allow an attacker to perform a cross-site scripting attack using the remote host and to perform a SQL injection attack on the remote...

Nucleus CMS Multiple Vulnerabilities

Binary data 2423.prm...

Nucleus CMS action.php itemid Parameter SQL Injection

The remote host is running Nucleus CMS, an open source content management system. There is a SQL injection condition in the remote version of this software that could allow an attacker to execute arbitrary SQL commands against the remote database. An attacker could exploit this flaw to gain...

NucleusCMS 3.01 SQL Injection Vulnerability

!/usr/bin/php ? // Nucleus CMS v3.01 addcoment/itemid SQL Injection Proof of Concept // By aCiDBiTS [email protected] 24-July-2004 // // Nucleus CMS http://nucleuscms.org is a weblog php+mysql application. // // This Proof of Concept dumps the username and MD5password of the admin user placed ...

nucleusCMSSQL.txt

!/usr/bin/php ? // Nucleus CMS v3.01 addcoment/itemid SQL Injection Proof of Concept // By aCiDBiTS [email protected] 24-July-2004 // // Nucleus CMS http://nucleuscms.org is a weblog php+mysql application. // // This Proof of Concept dumps the username and MD5password of the admin user placed ...

Nucleus CMS 3.0 Blog:CMS 3 PunBB 1.x - Common.php Remote File Inclusion

Nucleus CMS 3.0 Blog:CMS 3 PunBB 1.x - Common.php Remote File Inclusion source: https://www.securityfocus.com/bid/10760/info Nucleus CMS, Blog:CMS, and PunBB are vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be...

Nucleus CMS 3.0 / Blog:CMS 3 / PunBB 1.x - 'Common.php' Remote File Inclusion

source: https://www.securityfocus.com/bid/10760/info Nucleus CMS, Blog:CMS, and PunBB are vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable computer. Input passed to the 'common.php'...