2033 matches found
CVE-2006-4190
Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. dot dot in the name parameter for a modload operation...
local file include in PHP-Nuke (autohtml.php)
local file include in PHP-Nuke autohtml.php Rish : High Class : Local Script : autohtml.php Thanks : www.lezr.com/vb & All kuwait hackers Link : http://www.lezr.com/vb/showthread.php?p=104324 Drkiz : allinurl:"autohtml.php" autohtml.php?op=modload&name=The-file-you-want-to-include Exampel :...
PHP-Nuke 2.0 AutoHTML Module - Local File Inclusion
PHP-Nuke 2.0 AutoHTML Module - Local File Inclusion source: https://www.securityfocus.com/bid/19525/info PHP-Nuke AutoHTML Module is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit may allow an attacker to execute arbitra...
PHP-Nuke 2.0 AutoHTML Module - Local File Inclusion
source: https://www.securityfocus.com/bid/19525/info PHP-Nuke AutoHTML Module is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. A successful exploit may allow an attacker to execute arbitrary local scripts within the context of the affected...
CVE-2006-4072
Multiple SQL injection vulnerabilities in Club-Nuke XP 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL commands via the 1 haberid parameter to haberdetay.asp, and allow remote authenticated users to execute arbitrary SQL commands via the 2 menuid parameter to menu.asp...
CVE-2006-4072
Multiple SQL injection vulnerabilities affect Club-Nuke [XP] 2.0 LCID 2048. The flaws allow remote attackers to execute arbitrary SQL commands via the (1) haber_id parameter to haber_detay.asp and (2) menu_id parameter to menu.asp. Root cause: unsafely constructed SQL queries leading to injection...
CVE-2006-4072
Multiple SQL injection vulnerabilities in Club-Nuke XP 2.0 LCID 2048 allow remote attackers to execute arbitrary SQL commands via the 1 haberid parameter to haberdetay.asp, and allow remote authenticated users to execute arbitrary SQL commands via the 2 menuid parameter to menu.asp...
CLUB Nuke 2.0 - Multiple SQL Injections
CLUB Nuke 2.0 - Multiple SQL Injections source: https://www.securityfocus.com/bid/19442/info CLUB-Nuke is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
CLUB Nuke 2.0 - Multiple SQL Injections
source: https://www.securityfocus.com/bid/19442/info CLUB-Nuke is prone to multiple SQL-injection vulnerabilities because it fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or modify...
CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) SQL Injection
Exploit for unknown platform in category web applications ============================================================ CLUB-Nuke XP 2.0 LCID 2048 Turkish Version SQL Injection ============================================================ CLUB-Nuke XP v2.0 LCID 2048 Turkish Version SQL Injection...
CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) - SQL Injection
CLUB-Nuke XP 2.0 LCID 2048 Turkish Version - SQL Injection CLUB-Nuke XP v2.0 LCID 2048 Turkish Version SQL Injection Vulnerability Risk : High Credit : ASIANEAGLE Contact: [email protected] Web : www.asianeagle.org Download Link :...
CLUB-Nuke [XP] 2.0 LCID 2048 (Turkish Version) - SQL Injection
CLUB-Nuke XP v2.0 LCID 2048 Turkish Version SQL Injection Vulnerability Risk : High Credit : ASIANEAGLE Contact: [email protected] Web : www.asianeagle.org Download Link : http://www.aspindir.com/Kategoriler/asp/portal-&-hazir-site/?P=7&K=&T= Exploit: Note : User Logins Must Be Enabled By Admi...
phpnukeXSSaria.txt
---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon Gr33t to: O.U.T.L.A.W & A.u.r.a & DrtRp & Cl0wn ----------------------------------------------------------- Software: PHP-Nuke INP Description: PHP-Nuke INP is the modified version of...
CVE-2006-3948
Technical details for CVE-2006-3948 are not publicly available in the provided connected documents. Monitor for updates.
CVE-2006-3948
Cross-site scripting XSS vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web script or HTML via the query parameter...
PHP-Nuke INP XSS
---------------------------------------------------------- Aria-Security.net Advisory Discovered by: l2odon www.Aria-security.net Gr33t to: O.U.T.L.A.W & A.u.r.a & DrtRp & Cl0wn ----------------------------------------------------------- Software: PHP-Nuke INP Description: PHP-Nuke INP is the...
PHP-Nuke - 'INP modules.php' Cross-Site Scripting
source: https://www.securityfocus.com/bid/19208/info PHPNuke INP is prone to a cross-site scripting vulnerability that affects the 'modules.php' script. The specific version affected is currently unknown. http://www.example.com/path/modules.php?name=Downloads&op=search&query=alert'ARIA'...
CVE-2006-3598
SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle op...