CVE-2006-3598

SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle op...

CVE-2006-3598

CVE-2006-3598 affects the PHP-Nuke Sections module. The vulnerability is a SQL injection in the viewarticle op via the artid parameter, allowing remote attackers to execute arbitrary SQL commands. Public references indicate exploitation avenues exist (e.g., Exploit-DB, SecurityFocus). CVSS metric...

CVE-2006-3599

The CVE-2006-3599 entry describes a SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke. Affected component: the EditAds operation, exploitable via the id_ads parameter. Impact: remote attackers could execute arbitrary SQL commands (partial confidentiality/integrity/a...

CVE-2006-3599

SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idads parameter in an EditAds op...

PHP-Nuke Module's Name Sections<<--V3 SQL Injection

================================ Discovered By: CrAzY CrAcKeR ================================ Example:- /modules.php?name=Sections&op=viewarticle&artid=SQL ================================ Email:[email protected]...

PHP-Nuke Download Module Remote SQL Injection

================================== Fund By:BuNy-m Special for Site:www.alshmokh.com E-mail:[email protected] ================================== Example: /modules.php?name=Downloads&dop=viewdownload&cid=220UNION20select20counter,20aid,20pwd20FROM20nukeauthors20...

PHP-Nuke <= 7.9 Search XSS Vulnerability

PHP-Nuke = 7.9 Search module XSS Vulnerability It could work on later versions if PHP-Nuke does not patch it. 1: Enter: http://host/modules.php?name=Search 2: Search for: "body onload="alertdocument.cookie // You'll get a javascript alert with your cookie in it. Credits: O.G...

CVE-2006-2828

Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpbbrootpath parameter to the admin scripts 1 index.php, 2 adminugauth.php, 3 adminboard.php, 4 admindisallow.php, 5 adminforumauth.php, 6 admingroups.php, 7...

Design/Logic Flaw

Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpbbrootpath parameter to the admin scripts 1 index.php, 2 adminugauth.php, 3 adminboard.php, 4 admindisallow.php, 5 adminforumauth.php, 6 admingroups.php, 7...

CVE-2006-2828

Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpbbrootpath parameter to the admin scripts 1 index.php, 2 adminugauth.php, 3 adminboard.php, 4 admindisallow.php, 5 adminforumauth.php, 6 admingroups.php, 7...

CVE-2006-2828

CVE-2006-2828 is a vulnerability in PHP-Nuke where a global variable overwrite allows remote PHP file inclusion by a modified phpbb_root_path parameter to multiple admin scripts (index.php, admin_ug_auth.php, admin_board.php, admin_disallow.php, admin_forumauth.php, admin_groups.php, admin_ranks....

phpNukeInclude.txt

Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : PHP NUKE ALL VERSION Credits : ERNE Thanks : DjReMix,Eskobar,TRIP,ßy KorsaN,OsL3m7,Poizonbox,Dilejyoner and All MHG USERS Vulnerable :...

PHP-Nuke 7.9 Final - phpbb_root_path Remote File Inclusions

PHP-Nuke 7.9 Final - phpbbrootpath Remote File Inclusions Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : PHP NUKE ALL VERSION Credits : ERNE Thanks : DjReMix,Eskobar,TRIP,ßy...

PHP-Nuke <= 7.9 Final (phpbb_root_path) Remote File Inclusions

No description provided by source. Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : PHP NUKE ALL VERSION Credits : ERNE Thanks : DjReMix,Eskobar,TRIP,ßy KorsaN,OsL3m7,Poizonbox,Dilejyoner and All MHG USER...

PHP-Nuke 7.9 Final - 'phpbb_root_path' Remote File Inclusions

Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : PHP NUKE ALL VERSION Credits : ERNE Thanks : DjReMix,Eskobar,TRIP,ßy KorsaN,OsL3m7,Poizonbox,Dilejyoner and All MHG USERS Vulnerable :...

PHP-Nuke <= 7.9 Final (phpbb_root_path) Remote File Inclusions

Exploit for unknown platform in category web applications ============================================================== PHP-Nuke = 7.9 Final phpbbrootpath Remote File Inclusions ============================================================== Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke =...

Sql injection

SQL injection vulnerability in YourAccount.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 yas1, 2 yas2, and 3 yas3 parameters...

CVE-2006-2732

SQL injection vulnerability in YourAccount.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 yas1, 2 yas2, and 3 yas3 parameters...

CVE-2006-2734

enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by setting the guvenlik parameter to the same value as the hidden gguvenlik parameter, which bypasses a verification step because the gguvenlik parameter is assumed to be immutable by...

CVE-2006-2734

CVE-2006-2734 concerns enter.asp in Mini-Nuke 2.3 and earlier. The vulnerability stems from the gguvenlik/guvenlik parameter handling: an attacker can set guvenlik to the same value as the hidden gguvenlik parameter, bypassing a verification step that relies on gguvenlik being immutable. This ena...