Directory traversal

Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GLOBALSname parameter...

CVE-2007-1934

Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the GLOBALSname parameter...

CVE-2007-1934

CVE-2007-1934 affects the PHP-Nuke eBoard 1.0.7 module. The vulnerability is a directory traversal in member.php that allows remote attackers to include and execute arbitrary local files by supplying a .. in the GLOBALS[name] parameter. Multiple connected sources corroborate this exact issue and ...

CVE-2007-1925

The CVE-2007-1925 entry affects Tru-Zone Nuke ET 3.4 before fix 7, where the borrado function in modules/Your_Account/index.php does not verify that account deletion requests originate from the account owner. This allows remote authenticated users to delete arbitrary accounts by modifying cookies...

CVE-2007-1925

The borrado function in modules/YourAccount/index.php in Tru-Zone Nuke ET 3.4 before fix 7 does not verify that account deletion requests come from the account owner, which allows remote authenticated users to delete arbitrary accounts via a modified cookie...

PHP-Nuke Module eBoard 1.0.7 GLOBALS[name] LFI Exploit

No description provided by source. !Perl PHP-Nuke Module eBoard 1.0.7 GLOBALSname Local File Inclusion Exploit Vendor: http://www.complex-berlin.de/modules.php?name=Downloads&dop=getit&lid=975 Coded by bd0rk || SOH-Crew Greetz: str0ke, TheJT, MereX, mymaster use IO::Socket; use LWP::Simple; rippe...

PHP-Nuke Module eBoard 1.0.7 GLOBALS[name] LFI Exploit

Exploit for unknown platform in category web applications ====================================================== PHP-Nuke Module eBoard 1.0.7 GLOBALSname LFI Exploit ====================================================== !Perl PHP-Nuke Module eBoard 1.0.7 GLOBALSname Local File Inclusion Exploit...

PHP-Nuke Module eBoard 1.0.7 - GLOBALS[name] Local File Inclusion

PHP-Nuke Module eBoard 1.0.7 - GLOBALSname Local File Inclusion !Perl PHP-Nuke Module eBoard 1.0.7 GLOBALSname Local File Inclusion Exploit Vendor: http://www.complex-berlin.de/modules.php?name=Downloads&dop=getit&lid=975 Coded by bd0rk || SOH-Crew Greetz: str0ke, TheJT, MereX, mymaster use...

PHP-Nuke Module eBoard 1.0.7 - GLOBALS[name] Local File Inclusion

!Perl PHP-Nuke Module eBoard 1.0.7 GLOBALSname Local File Inclusion Exploit Vendor: http://www.complex-berlin.de/modules.php?name=Downloads&dop=getit&lid=975 Coded by bd0rk || SOH-Crew Greetz: str0ke, TheJT, MereX, mymaster use IO::Socket; use LWP::Simple; ripped @apache=...

Remote file inclusion

PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 EN-Forums module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-1778

PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 EN-Forums module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

CVE-2007-1778

CVE-2007-1778 is a PHP remote file inclusion vulnerability in the Eve-Nuke 0.1 (EN-Forums) module for PHP-Nuke. The issue allows remote attackers to execute arbitrary PHP code through a URL supplied to the phpbb_root_path parameter, leading to complete compromise of affected systems. The NVD entr...

CVE-2007-1778

PHP remote file inclusion vulnerability in db/mysql.php in the Eve-Nuke 0.1 EN-Forums module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the phpbbrootpath parameter...

Eve-Nuke Forums MySQL.PHP远程文件包含漏洞

Eve-Nuke Forums是一款基于PHP的WEB应用程序。 Eve-Nuke Forums不正确过滤用户提交的输入，远程攻击者可以利用漏洞以WEB权限执行任意命令。 问题是'MySQL.PHP'脚本对用户提交的WEB参数缺少过滤，指定远程服务器上的文件作为包含参数，可导致以WEB权限执行任意命令。 Eve-Nuke Eve-Nuke Forum beta.01 目前没有解决方案提供： http://eve-nuke.sourceforge.net/...

CVE-2007-1720

Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modulename parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file...

PHP-Nuke Module Eve-Nuke 0.1 (mysql.php) RFI Vulnerability

No description provided by source. =========================================================================================== Eve-NukePortal file include phpbbrootpath =========================================================================================== Script name :Eve-Nuke Portal Downloa...

CVE-2007-1720

Directory traversal vulnerability in addressbook.php in the Addressbook 1.2 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. dot dot in the modulename parameter, as demonstrated by injecting PHP sequences into an Apache HTTP Server log file...

PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit

No description provided by source. !Perl PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit Vendor: http://www.sb-websoft.com/index.php?name=CmodsDownload&file=index&req=getit&lid=14 Vulnerable Code: requireonce"modules/$modulename/include/func.inc.php"; Coded by bd0rk || SOH-Crew...

PHP-Nuke Module Eve-Nuke 0.1 (mysql.php) RFI Vulnerability

Exploit for unknown platform in category web applications ========================================================== PHP-Nuke Module Eve-Nuke 0.1 mysql.php RFI Vulnerability ==========================================================...

phpnuke-ab-lfi.txt

!Perl PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit Vendor: http://www.sb-websoft.com/index.php?name=CmodsDownload&file=index&req=getit&lid=14 Vulnerable Code: requireonce"modules/$modulename/include/func.inc.php"; Coded by bd0rk || SOH-Crew Greetz: str0ke, TheJT, saint, CodeR, rgo...