2033 matches found
PHP-Nuke 7.9 - Encyclopedia SQL Injection
PHP-Nuke 7.9 - Encyclopedia SQL Injection ? / Neo Security Team - Exploit made by Paisterist on 2006-10-22 http://www.neosecurityteam.net / $host="localhost"; $path="/phpnuke/"; $prefix="nuke"; $port="80"; $fp = fsockopen$host, $port, $errno, $errstr, 30; $data="query=fooaa&eid=foo'//UNION SELECT...
PHP-Nuke <= 7.9 (Encyclopedia) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================================== PHP-Nuke = 7.9 Encyclopedia Remote SQL Injection Exploit =========================================================== ? / Neo Security Team - Exploit made by Paisterist on 2006-10-...
PHP-Nuke <= 7.9 (Encyclopedia) Remote SQL Injection Exploit
No description provided by source. ? / Neo Security Team - Exploit made by Paisterist on 2006-10-22 http://www.neosecurityteam.net / $host="localhost"; $path="/phpnuke/"; $prefix="nuke"; $port="80"; $fp = fsockopen$host, $port, $errno, $errstr, 30; $data="query=fooaa&eid=foo'//UNION SELECT pwd as...
PHP-Nuke 7.9 - 'Encyclopedia' SQL Injection
? / Neo Security Team - Exploit made by Paisterist on 2006-10-22 http://www.neosecurityteam.net / $host="localhost"; $path="/phpnuke/"; $prefix="nuke"; $port="80"; $fp = fsockopen$host, $port, $errno, $errstr, 30; $data="query=fooaa&eid=foo'//UNION SELECT pwd as title FROM $prefixauthors WHERE...
CVE-2006-4993
AllMyGuests 0.4.1 and earlier are affected by multiple PHP remote file inclusion vulnerabilities. An attacker can trigger code execution by supplying a URL in the _AMGconfig[cfg_serverpath] parameter in (1) modules/AllMyGuests/signin.php and (2) AllMyGuests/signin.php (standalone). The issue stem...
AllMyGuests 0.4.1 - cfg_serverpath Remote File Inclusion
AllMyGuests 0.4.1 - cfgserverpath Remote File Inclusion ============================================================================ AllMyGuests = ?AMGconfigcfgserverpath Remote File Inclusion Exploit ============================================================================ Scirpt Infected...
AllMyGuests 0.4.1 - 'cfg_serverpath' Remote File Inclusion
============================================================================ AllMyGuests = ?AMGconfigcfgserverpath Remote File Inclusion Exploit ============================================================================ Scirpt Infected signin.php Critical level : Dangerous...
Coppermine Photo Gallery <= 1.2.2b (Nuke Addon) Include Vulnerability
Exploit for unknown platform in category web applications ===================================================================== Coppermine Photo Gallery = 1.2.2b Nuke Addon Include Vulnerability =====================================================================...
Coppermine Photo Gallery <= 1.2.2b (Nuke Addon) Include Vulnerability
No description provided by source. ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Coppermine Photo Gallery v1.2.2b for PHPNUKE THEMEDIR Remote File...
PHP-Nuke Book Catalog Module 1.0 - upload.php Arbitrary File Upload
PHP-Nuke Book Catalog Module 1.0 - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/19890/info The Book Catalog module for PHP-Nuke is prone to a vulnerability that lets attackers upload arbitrary files. Exploiting this issue may allow an attacker to compromise the...
PHP-Nuke Book Catalog Module 1.0 - 'upload.php' Arbitrary File Upload
source: https://www.securityfocus.com/bid/19890/info The Book Catalog module for PHP-Nuke is prone to a vulnerability that lets attackers upload arbitrary files. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible...
CVE-2006-4563
Cross-site scripting XSS vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the myhop parameter to modules.php...
CVE-2006-4563
CVE-2006-4563 details a cross-site scripting (XSS) flaw in the MyHeadlines before 4.3.2 module for PHP-Nuke. The vulnerability can be exploited remotely to inject arbitrary web script or HTML via the myh_op parameter to modules.php. Per the NVD entry, the CVSSv2 base score is 6.8 (MEDIUM) with ne...
CVE-2006-4563
Cross-site scripting XSS vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the myhop parameter to modules.php...
PHP-Nuke MyHeadlines 4.3.1 Module - Cross-Site Scripting
PHP-Nuke MyHeadlines 4.3.1 Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/19825/info PHP-Nuke MyHeadlines module is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...
[SA21653] PHP-Nuke MyHeadlines Module "myh_op" Cross-Site Scripting
TITLE: PHP-Nuke MyHeadlines Module "myhop" Cross-Site Scripting SECUNIA ADVISORY ID: SA21653 VERIFY ADVISORY: http://secunia.com/advisories/21653/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MyHeadlines 4.x module for PHP-Nuke http://secunia.com/product/11722...
PHP-Nuke MyHeadlines 4.3.1 Module - Cross-Site Scripting
source: https://www.securityfocus.com/bid/19825/info PHP-Nuke MyHeadlines module is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...
phpnukeInclude.txt
local file include in PHP-Nuke autohtml.php Rish : High Class : Local Script : autohtml.php Thanks : www.lezr.com/vb & All kuwait hackers Link : http://www.lezr.com/vb/showthread.php?p=104324 Drkiz : allinurl:"autohtml.php" autohtml.php?op=modload&name=The-file-you-want-to-include Exampel :...
CVE-2006-4190
Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. dot dot in the name parameter for a modload operation...
CVE-2006-4190
CVE-2006-4190 is a directory traversal vulnerability in the AutoHTML module for PHP-Nuke, exploitable via a .. in the name parameter of a modload operation within autohtml.php. The affected component is the AutoHTML module’s autohtml.php; root cause is improper handling of the filename parameter ...