2033 matches found
CVE-2006-0726
Cross-site scripting XSS vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a list of online users...
Cross site scripting
Cross-site scripting XSS vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a list of online users...
CVE-2006-0726
CVE-2006-0726 is an XSS vulnerability in linking.php of CPG-Nuke Dragonfly CMS 9.0.6.1. The issue allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a list of online users. Affected component: linking.php within Dragonfly CMS 9.0.6.1. The conn...
CVE-2006-0726
Cross-site scripting XSS vulnerability in linking.php in CPG-Nuke Dragonfly CMS 9.0.6.1 allows remote attackers to inject arbitrary web script or HTML via a URI that is generated when creating a list of online users...
CVE-2006-0727
CVE-2006-0727 describes a SQL injection in mstrack.php of MusOX DF MSAnalysis (DFMSA), used with CPG-Nuke Dragonfly CMS. An attacker can trigger path disclosure via a SQL syntax error and may be able to execute arbitrary SQL commands. The affected software is MusOX DF MSAnalysis as used in Dragon...
CVE-2006-0676
Cross-site scripting XSS vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter...
Cross site scripting
Cross-site scripting XSS vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter...
CVE-2006-0676
The CVE-2006-0676 entry describes a Cross‑Site Scripting (XSS) vulnerability in PHP-Nuke, affecting version 6.0 through 7.8. The issue resides in header.php and allows an attacker to inject arbitrary script/HTML via the pagetitle parameter, potentially affecting any pages that reflect this input....
CVE-2005-4715
CVE-2005-4715 concerns multiple SQL injection vulnerabilities in PHP-Nuke 7.8. The flaw occurs in modules.php when magic_quotes_gpc is disabled, allowing remote attackers to inject arbitrary SQL via the POST parameters (name, sid, pid) that bypass security checks applied to GET requests. Affected...
CVE-2006-0676
Cross-site scripting XSS vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter...
CVE-2005-4715
Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 sid, and 3 pid parameters in a POST request, which bypasses security checks that are performed for GET requests...
[SA18820] PHP-Nuke "pagetitle" Cross-Site Scripting Vulnerability
TITLE: PHP-Nuke "pagetitle" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18820 VERIFY ADVISORY: http://secunia.com/advisories/18820/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP-Nuke 7.x http://secunia.com/product/2385/ PHP-Nuke 6.x...
PHP-Nuke 6.x/7.x - 'header.php?Pagetitle' Cross-Site Scripting
source: https://www.securityfocus.com/bid/16608/info PHPNuke is prone to a cross-site scripting vulnerability. This issue affects the 'header.php' script. PHPNuke 7.8 and prior versions are reportedly vulnerable. http://www.example.com/nuke78/?pagetitle=w00ttest...
CVE-2006-0644
Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS aka CPG Dragonfly CMS 9.0.6.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL %00 character in 1 the newlang parameter and 2 the installlang...
Directory traversal
Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS aka CPG Dragonfly CMS 9.0.6.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL %00 character in 1 the newlang parameter and 2 the installlang...
CVE-2006-0644
Multiple directory traversal vulnerabilities in install.php in CPG-Nuke Dragonfly CMS aka CPG Dragonfly CMS 9.0.6.1 allow remote attackers to include and execute arbitrary local files via directory traversal sequences and a NUL %00 character in 1 the newlang parameter and 2 the installlang...
CVE-2006-0644
Dragonfly CMS (CPG-Nuke) 9.0.6.1 contains multiple directory traversal vulnerabilities in install.php that allow remote attackers to include and execute arbitrary local files. The issue arises from insufficient validation of the newlang parameter and the installlang cookie, which can be exploited...
sPaizXSS.txt
NightWarrior nightwarrior771athotmail.com sPaiz-Nuke Cross-Site Scripting Vulnerability http://www.alstrasoft.com http://www.example.com/sPaiz-Nuke/modules.php?name=Articles&file=search&query=XSS&type=articles&type=comments...
Cross site scripting
Cross-site scripting XSS vulnerability in the Articles module in sPaiz-Nuke allows remote attackers to inject arbitrary web script or HTML via the query parameter in the search file...