2033 matches found
File Including In FLAT NUKE
Class: Input Validation Error CVE: CVE-MAP-NOMATCH Remote: Yes Local: No Credit: Abducter [email protected] Or [email protected] Vulnerable: File Including In FLAT NUKE ALL VERSION info FLAT NUKE IS POWER PHP SITES SUPPORT HERE http://flatnuke.sourceforge.net/flatnuke expliot...
Flat Nuke Cross Site Scripting
Web Site: Vulnerable: FlatNuke = 2.5.6 This script is possibly vulnerable to Cross Site Scripting XSS attacks Malicious users may inject JavaScript, VBScript, ActiveX, into a vulnerable application to fool a user in order to gather data from them. Affects...
CVE-2005-3281
Directory traversal vulnerability in NukeFixes 3.1 for PHP-Nuke 7.8 allows remote attackers to include arbitrary files via the file parameter...
CVE-2005-3281
CVE-2005-3281 affects NukeFixes 3.1 for PHP-Nuke 7.8, with a directory traversal flaw that lets remote attackers include arbitrary files via the file parameter. The NVD entry and Red Hat advisory corroborate this description. CVSSv2 base score is 5.0 (Medium): network access, low attack complexit...
[SA17218] PHP-Nuke NukeFixes Addon "file" Local File Inclusion Vulnerability
TITLE: PHP-Nuke NukeFixes Addon "file" Local File Inclusion Vulnerability SECUNIA ADVISORY ID: SA17218 VERIFY ADVISORY: http://secunia.com/advisories/17218/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: NukeFixes 3.x addon for PHP-Nuke...
PHP-Nuke Search Module - modules.php Directory Traversal
PHP-Nuke Search Module - modules.php Directory Traversal source: https://www.securityfocus.com/bid/15137/info PHPNuke Search Module is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. A remote attacker may view files that are only...
ASP-Nuke伪造Cookie导致信息泄露漏洞
BugCVE: CVE-2002-0523 BUGTRAQ: 4489 ASP-Nuke存在设计问题，可导致攻击者获得主机相关敏感信息。 攻击者可以本地修改Cookie信息并提交，导致主机返回所有当前登陆用户列表或者返回包含WEB ROOT路径的错误信息。 攻击者可以利用这些信息进一步对系统进行攻击。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke -------- 目前厂商已经在最新版本的软件中修补了此漏洞，请到厂商的主页获取最新版本： http://www.asp-nuke.com/downloads.asp...
ASP-Nuke RC1 图象标记跨站脚本执行漏洞(CSS/XSS)
BugCVE: CVE-2002-0520 BUGTRAQ: 4475 ASP-Nuke对用户输入过滤上存在漏洞，可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 ASP-Nuke支持在帖子中用户使用img//img标记插入图象连接，但它未对标记中的内容做充分过滤，这可能导致攻击者在此标记的内容中放入脚本代码，当其他用户浏览此相关链接的时候，脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于Cookie的认证信息。 ASP-Nuke RC1 临时解决方法： 如果您不能立刻安装补丁或者升级，建议您采取以下措施以降低威胁： 在漏洞修复之前暂时关闭Image标记的使用。...
CVE-2005-3016
Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack vectors...
CVE-2005-3016
Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack vectors...
CVE-2005-3016
Technical details are not publicly available in the provided documents for CVE-2005-3016. No concrete information on affected products, versions, root cause, or remediation is provided; monitor for updates.
PHP-Nuke <= 7.8 (modules.php) SQL Injection Exploit
No description provided by source. / PHP-Nuke =7.8 SQL injection exploit need MySQL 4.0 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru / // tested on 7.8 include stdio.h include string.h include sys/types.h include sys/socket.h include netinet/in.h include netdb.h include regex.h defi...
PHP-Nuke 7.8 - modules.php SQL Injection
PHP-Nuke 7.8 - modules.php SQL Injection / PHP-Nuke 4.0 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru / // tested on 7.8 include include include include include include include define START 47 define END 103 define SZ 1024 define PORT 80 define PREFIX "nuke" define SQL...
[SA16843] PHP-Nuke Unspecified wysiwyg Editor Vulnerabilities
---------------------------------------------------------------------- Bist Du interessiert an einem neuen Job in IT-Sicherheit? Secunia hat zwei freie Stellen als Junior und Senior Spezialist in IT- Sicherheit: http://secunia.com/secuniavacancies/...
PHP-Nuke <= 7.8 (modules.php) SQL Injection Exploit
Exploit for unknown platform in category web applications =================================================== PHP-Nuke 4.0 coded by 1dt.w0lf RST/GHC / // tested on 7.8 include include include include include include include define START 47 define END 103 define SZ 1024 define PORT 80 define PREFI...
PHP-Nuke 7.8 - 'modules.php' SQL Injection
/ PHP-Nuke 4.0 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru / // tested on 7.8 include include include include include include include define START 47 define END 103 define SZ 1024 define PORT 80 define PREFIX "nuke" define SQL...
PHPNuke78.txt
NewAngels Advisory 7PHP Nuke sqlquery"SELECT active, view FROM ".$prefix."modules WHERE title='$name'"; The $name variable is not checked so you could inject malicious SQL Code. In an file which is included whe have the following code: $queryString = strtolower$SERVER'QUERYSTRING'; if...
PHP Nuke <= 7.8 Multiple SQL Injections
NewAngels Advisory 7PHP Nuke = 7.8 Multiple SQL Injections ============================================================================= Software: PHP Nuke 7.8 Type: SQL Injections Risk: High Date: Sep. 10 2005 Vendor: PHP-Nuke phpnuke.org Credit: ======= Robin 'onkelfisch' Verton from...
phpnukeXSS.txt
PHP-Nuke Search Cross-Site Scripting Vulnerability Vulnerable: i think all ver. data:2005-09-5 exploit : openme.htm :: ' document.searchform.sub.click thanks , BHFH. email : [email protected]...
PHP-Nuke
PHP-Nuke Search Cross-Site Scripting Vulnerability Vulnerable: i think all ver. data:2005-09-5 exploit : openme.htm :: html form name=searchform method=post action=http://target/modules.php?op=modload&name=SearchEnhanced&file= index input type="text" name="query" size="15" value='script...