CVE-2018-16636

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter...

Design/Logic Flaw

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter...

CVE-2018-16636

CVE-2018-16636 affects Nucleus CMS 3.70, where an HTML injection vulnerability exists in the index.php body parameter. The root cause is improper handling of input leading to HTML injection, enabling an attacker to inject HTML into pages. The connected documents confirm the vulnerability’s existe...

CVE-2018-16636

Nucleus CMS 3.70 allows HTML Injection via the index.php body parameter...

TB Nucleus - Critical - Unsupported - SA-CONTRIB-2018-031

Update - 2018-09-26 This maintainer has fixed this security issue. Please install https://www.drupal.org/project/nucleus/releases/7.x-1.6 to fix the security issue The security team is marking this theme unsupported. There is a known security issue with the theme that has not been fixed by the...

Nucleus CMS Cross-Site Scripting Vulnerability

Nucleus CMS is an open source PHP-based blog management software package developed by the Nucleus team. A cross-site scripting vulnerability exists in Nucleus CMS version 3.65. A remote attacker can exploit this vulnerability to inject arbitrary web script or HTML with the help of the 'title'...

CVE-2015-5454

Cross-site scripting XSS vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item...

Cross site scripting

Cross-site scripting XSS vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item...

CVE-2015-5454

Cross-site scripting XSS vulnerability in Nucleus CMS allows remote attackers to inject arbitrary web script or HTML via the title parameter when adding a new item...

CVE-2015-5454

Nucleus CMS is affected by a cross-site scripting (XSS) vulnerability (CVE-2015-5454) in which remote attackers can inject arbitrary JavaScript/HTML through the title parameter when adding a new item. CNVD-2015-04422 and related NVD records document this issue for Nucleus CMS version 3.65. The ro...

Nucleus CMS 3.65 Cross Site Scripting

​ Exploit Title: Persistent Cross Site Scripting Vulnerability in nucleuscms Date: 25 July 2015 Exploit Author: sharan kumar somana Vendor Homepage: http://www.nucleuscms.org Software Link: http://sourceforge.net/projects/nucleuscms/?source=typredirect Version: 3.65 Tested on: Windows 7 nucleuscm...

Nucleus CMS <= 3.22 (DIR_LIBS) Arbitrary Remote Inclusion Exploit

No description provided by source. !/usr/bin/php -q -d shortopentag=on ? echo Nucleus = 3.22 arbitrary remote inclusion exploit\r\n; echo by rgod [email protected]\r\n; echo site: http://retrogod.altervista.org\r\n\r\n; echo this is called the \deadly eyes of Sun-tzu\r\n; echo dork: Copyright...

Nucleus CMS 3.51 (DIR_LIBS) - Multiple Vulnerability

No description provided by source. Nucleus CMS v.3.51 DIRLIBS Multiple Vulnerability /\ \ /\ \ /\ /\ \ \ \ \L\ \ \ /'\ /\ \ \ ,\ \ \ \ \ /\ /\ \ /'\ \ , /\ \ /' \ /' \ \ \ /\ \ \ /'\ \ \ /\ \ \ /\ /\ \ \\ \ /\ /\ /\ \L\ \ \ \ \ \ \ \ /\ / \ \ \ /\ \\ \ \ \ \ \ \ \ \ \...

Zoom X4/X5 ADSL Modem - Multiple Vulnerabilities

No description provided by source. Vulnerable Products - Zoom X4 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Zoom X5 ADSL Modem and Router running Nucleus/4.3 UPnP/1.0Virata-EmWeb/R620 Server All GS Firmware versions Note: A similar...

Nucleus Plugin Gallery RFI & SQLi Vulnerability

No description provided by source. ============================================================================================================= o Nucleus Plugin Gallery RFI & SQLi Vulnerability Software : NPGallery version 0.94 Download :...

Nucleus CMS 3.0,Blog:CMS 3,PunBB 1.x Common.PHP Remote File Include Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/10760/info Nucleus CMS, Blog:CMS, and PunBB are vulnerable to a remote file include vulnerability that may allow an attacker to include malicious files containing arbitrary code to be executed on a vulnerable computer...

Nucleus 3.61 - Multiple Remote File Include

No description provided by source. Nucleus v3.61 === Multiple Remote File Include By n0n0x Homepage: http://priasantai.uni.cc/ Download script :http://sourceforge.net/projects/nucleuscms/ ========================================= nucleus3.61/action.php?DIRLIBS=y0ur g4y sh3ll????????????? 13. / 14...

Nucleus CMS 3.0.1 Index.PHP Cross-Site Scripting Vulnerability

No description provided by source...

Nucleus CMS 3.0.1 'myid' Parameter SQL Injection Weakness

No description provided by source. source: http://www.securityfocus.com/bid/27127/info Nucleus CMS is prone to an SQL-injection weakness because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Attackers can exploit this issue in conjunction with other...

Nucleus Plugin Twitter Remote File Inclusion Vulnerability

No description provided by source. ============================================================================================================= o Nucleus Plugin Twitter Remote File Inclusion Vulnerability Software : NPTwitter version 0.8 Download :...