2034 matches found
PHP-Nuke 7.8 - Mainfile.php SQL Injection
PHP-Nuke 7.8 - Mainfile.php SQL Injection source: https://www.securityfocus.com/bid/16831/info PHP-Nuke is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation...
PHP-Nuke 7.8 - 'Mainfile.php' SQL Injection
source: https://www.securityfocus.com/bid/16831/info PHP-Nuke is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could allow an attacker to compromise the...
Sql injection
SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: version 2.3 was later reported to be vulnerable as well...
CVE-2006-0870
SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: version 2.3 was later reported to be vulnerable as well...
CVE-2006-0870
The CVE-2006-0870 entry concerns the Mini-Nuke CMS System (versions 1.8.2 and earlier). The vulnerability is a SQL injection in pages.asp accessible via the id parameter, allowing remote attackers to execute arbitrary SQL commands. The note also states that version 2.3 was later reported vulnerab...
CVE-2006-0870
SQL injection vulnerability in pages.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the id parameter. NOTE: version 2.3 was later reported to be vulnerable as well...
PHP-Nuke 7.5 - 7.8 (Search) Remote SQL Injection Exploit
No description provided by source. / | | | | | | | / | | | | | |/ \ | | --- | |----| | \ \ || | | | || / Copyright C 2006 Untruth Labs Critical sql injection in phpNuke 7.5-7.8 Exploit coded by unitedbr greetz: paulin, barros, xgc found by Janek Vind "waraxe" Original advisory:...
PHP-Nuke 7.5 7.8 - Search SQL Injection
PHP-Nuke 7.5 7.8 - Search SQL Injection / | | | | | | | / | | | | | |/ \ | | --- | |----| | \ \ || | | | || / Copyright C 2006 Untruth Labs Critical sql injection in phpNuke 7.5-7.8 Exploit coded by unitedbr greetz: paulin, barros, xgc found by Janek Vind "waraxe" Original advisory:...
PHP-Nuke 7.5 < 7.8 - 'Search' SQL Injection
/ | | | | | | | / | | | | | |/ \ | | --- | |----| | \ \ || | | | || / Copyright C 2006 Untruth Labs Critical sql injection in phpNuke 7.5-7.8 Exploit coded by unitedbr greetz: paulin, barros, xgc found by Janek Vind "waraxe" Original advisory: http://www.waraxe.us/advisory-46.html...
PHP-Nuke 7.5 - 7.8 (Search) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications ======================================================== PHP-Nuke 7.5 - 7.8 Search Remote SQL Injection Exploit ======================================================== / | | | | | | | / | | | | | |/ \ | | --- | |----| | \ \ || | | | || /...
dragonflycms9.0.6.1.txt
Multiple Cross site scripting in dragonflycms 9.0.6.1 Vendor url:http://dragonflycms.org/ Advisore: http://lostmon.blogspot.com/2006/02/ multiple-cross-site-scripting-in.html Vendor notify: exploit available: yes Description: "Dragonfly CMS is a powerful, feature-rich, Open Source content...
Design/Logic Flaw
The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent HTTPUSERAGENT, which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying tha...
CVE-2006-0805
The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent HTTPUSERAGENT, which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying tha...
CVE-2006-0805
The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent HTTPUSERAGENT, which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying tha...
CVE-2006-0805
The CVE-2006-0805 issue affects php-Nuke 6.0–7.9 where CAPTCHA uses fixed challenge/response pairs that vary only daily based on the User-Agent. An attacker can bypass CAPTCHA by fixing HTTP_USER_AGENT, performing a valid challenge/response, and replaying that pair in the random_num and gfx_check...
PHP-Nuke 7.x - CAPTCHA Bypass
PHP-Nuke 7.x - CAPTCHA Bypass source: https://www.securityfocus.com/bid/16722/info The CAPTCHA implementation of PHPNuke may be bypassed by remote attackers due to a design error. This may be used to carry out other attacks such as brute-force attempts against the login page. ------ real life...
PHP-Nuke 7.x - CAPTCHA Bypass
source: https://www.securityfocus.com/bid/16722/info The CAPTCHA implementation of PHPNuke may be bypassed by remote attackers due to a design error. This may be used to carry out other attacks such as brute-force attempts against the login page. ------ real life exploit ------ phpNuke CAPTHCA...
CVE-2006-0679
SQL injection vulnerability in index.php in the YourAccount module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL commands via the username variable Nickname field...
Sql injection
SQL injection vulnerability in index.php in the YourAccount module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL commands via the username variable Nickname field...