2033 matches found
CVE-2006-3598
SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle op...
CVE-2006-3599
The CVE-2006-3599 entry describes a SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke. Affected component: the EditAds operation, exploitable via the id_ads parameter. Impact: remote attackers could execute arbitrary SQL commands (partial confidentiality/integrity/a...
CVE-2006-3598
CVE-2006-3598 affects the PHP-Nuke Sections module. The vulnerability is a SQL injection in the viewarticle op via the artid parameter, allowing remote attackers to execute arbitrary SQL commands. Public references indicate exploitation avenues exist (e.g., Exploit-DB, SecurityFocus). CVSS metric...
PHP-Nuke Module's Name Sections<<--V3 SQL Injection
================================ Discovered By: CrAzY CrAcKeR ================================ Example:- /modules.php?name=Sections&op=viewarticle&artid=SQL ================================ Email:[email protected]...
PHP-Nuke Download Module Remote SQL Injection
================================== Fund By:BuNy-m Special for Site:www.alshmokh.com E-mail:[email protected] ================================== Example: /modules.php?name=Downloads&dop=viewdownload&cid=220UNION20select20counter,20aid,20pwd20FROM20nukeauthors20...
PHP-Nuke <= 7.9 Search XSS Vulnerability
PHP-Nuke = 7.9 Search module XSS Vulnerability It could work on later versions if PHP-Nuke does not patch it. 1: Enter: http://host/modules.php?name=Search 2: Search for: "body onload="alertdocument.cookie // You'll get a javascript alert with your cookie in it. Credits: O.G...
Design/Logic Flaw
Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpbbrootpath parameter to the admin scripts 1 index.php, 2 adminugauth.php, 3 adminboard.php, 4 admindisallow.php, 5 adminforumauth.php, 6 admingroups.php, 7...
CVE-2006-2828
Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpbbrootpath parameter to the admin scripts 1 index.php, 2 adminugauth.php, 3 adminboard.php, 4 admindisallow.php, 5 adminforumauth.php, 6 admingroups.php, 7...
CVE-2006-2828
CVE-2006-2828 is a vulnerability in PHP-Nuke where a global variable overwrite allows remote PHP file inclusion by a modified phpbb_root_path parameter to multiple admin scripts (index.php, admin_ug_auth.php, admin_board.php, admin_disallow.php, admin_forumauth.php, admin_groups.php, admin_ranks....
CVE-2006-2828
Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpbbrootpath parameter to the admin scripts 1 index.php, 2 adminugauth.php, 3 adminboard.php, 4 admindisallow.php, 5 adminforumauth.php, 6 admingroups.php, 7...
phpNukeInclude.txt
Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : PHP NUKE ALL VERSION Credits : ERNE Thanks : DjReMix,Eskobar,TRIP,ßy KorsaN,OsL3m7,Poizonbox,Dilejyoner and All MHG USERS Vulnerable :...
PHP-Nuke <= 7.9 Final (phpbb_root_path) Remote File Inclusions
No description provided by source. Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : PHP NUKE ALL VERSION Credits : ERNE Thanks : DjReMix,Eskobar,TRIP,ßy KorsaN,OsL3m7,Poizonbox,Dilejyoner and All MHG USER...
PHP-Nuke <= 7.9 Final (phpbb_root_path) Remote File Inclusions
Exploit for unknown platform in category web applications ============================================================== PHP-Nuke = 7.9 Final phpbbrootpath Remote File Inclusions ============================================================== Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke =...
PHP-Nuke 7.9 Final - phpbb_root_path Remote File Inclusions
PHP-Nuke 7.9 Final - phpbbrootpath Remote File Inclusions Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : PHP NUKE ALL VERSION Credits : ERNE Thanks : DjReMix,Eskobar,TRIP,ßy...
PHP-Nuke 7.9 Final - 'phpbb_root_path' Remote File Inclusions
Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : PHP NUKE ALL VERSION Credits : ERNE Thanks : DjReMix,Eskobar,TRIP,ßy KorsaN,OsL3m7,Poizonbox,Dilejyoner and All MHG USERS Vulnerable :...
CVE-2006-2734
enter.asp in Mini-Nuke 2.3 and earlier makes it easier for remote attackers to conduct password guessing attacks by setting the guvenlik parameter to the same value as the hidden gguvenlik parameter, which bypasses a verification step because the gguvenlik parameter is assumed to be immutable by...
Sql injection
SQL injection vulnerability in YourAccount.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 yas1, 2 yas2, and 3 yas3 parameters...
CVE-2006-2732
SQL injection vulnerability in YourAccount.asp in Mini-Nuke 2.3 and earlier allows remote attackers to execute arbitrary SQL commands via the 1 yas1, 2 yas2, and 3 yas3 parameters...
CVE-2006-2733
CVE-2006-2733 affects Mini-Nuke 2.3 and earlier. The issue is in membership.asp where plaintext security codes are used, allowing remote attackers to register multiple times via automated scripts. The connected documents confirm the product/version range and the vulnerability mechanism; no mitiga...