ASP-Nuke <= 0.80 comment_post.asp远程SQL注入漏洞

ASPNuke中存在SQL注入漏洞，远程攻击者可以利用此漏洞非授权访问数据库。 起因是没有正确的过滤用户输入。请看/module/support/task/commentpost.asp的第36行和第75行代码： ... nTaskID = steNForm TaskID ... If sErrorMsg = Then prevent dup posting here sStat = SELECT TaskID & FROM tblTaskComment & WHERE TaskID = & nTaskID & & AND Subject = & ReplacesSubject, , &...

ASP-Nuke <= 0.80 多个跨站脚本(CSS/XSS)漏洞

BUGTRAQ: 14062 ASPNuke中存在多个跨站脚本漏洞，起因是没有正确的过滤用户输入。在/module/account/register/forgotpassword.asp第33行和103行代码中： ? ... sEmail = steForm Email ... TR TD class= forml % steTxt E-Mail % reqBR INPUT TYPE= text NAME= email VALUE= %= sEmail % SIZE= 22 MAXLENGTH= 80 class= form /TD /TR TR ... ?...

CVE-2004-2354

SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter to modules.php, which can also facilitate cross-site scripting XSS attacks when MySQL errors are triggered...

CVE-2004-2352

Cross-site scripting XSS vulnerability in GBook for PHP-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via cookies that are stored in the $COOKIE PHP variable, which is not cleansed by PHP-Nuke...

CVE-2004-2351

CVE-2004-2351 describes a cross-site scripting (XSS) vulnerability in GBook for Php-Nuke 1.0. Remote attackers can inject arbitrary web script or HTML through multiple user-input fields (name, email, city, message) that reportedly do not use [removed] or tags, which PHP-Nuke purportedly filters....

CVE-2004-2354

CVE-2004-2354 describes a SQL injection vulnerability in the 4nGuestbook 0.92 module used with PHP-Nuke 6.5–6.9. The flaw allows remote attackers to modify SQL statements via the entry parameter to modules.php, with the potential to trigger MySQL errors that may enable cross-site scripting (XSS)....

CVE-2004-2352

The CVE-2004-2352 entry documents a Cross-site Scripting (XSS) vulnerability in GBook for PHP-Nuke 1.0. Affected component: GBook for PHP-Nuke 1.0; vulnerability type: XSS via cookies stored in the $_COOKIE variable that are not cleansed by PHP-Nuke. Impact: remote attackers could inject arbitrar...

CVE-2004-2351

Cross-site scripting XSS vulnerability in GBook for Php-Nuke 1.0 allows remote attackers to inject arbitrary web script or HTML via multiple parameters, including 1 name, 2 email, 3 city, and 4 message, which do not use the and tags, which are filtered by PHP-Nuke...

postnuke0750.txt

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 PostNuke SQL Injection 0.750=x cXIb8O3.5 Author: cXIb8O3 Date: 2.3.2005 from SecurityReason.Com - --- 0.Description --- PostNuke: The Phoenix Release 0.750 PostNuke is an open source, open developement content management system CMS. PostNuke started a...

ASP-Nuke RC1-RC2 用户资料页面跨站脚本(CSS/XSS)执行漏洞

BugCVE: CAN-2002-0521 BUGTRAQ: 4481 ASP-Nuke对用户输入过滤上存在漏洞，可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 ASP-Nuke中的用户资料页面处理用户输入时没有充分过滤相关Javascript代码，攻击者可以在任意用户资料字段处输入恶意脚本代码，当其他用户浏览相关信息的时候，脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于Cookie的认证信息。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke --------...

ASP-Nuke RC1-RC2 明文Cookie认证信息导致任意访问漏洞

BugCVE: CAN-2002-0522 BUGTRAQ: 4484 ASP-Nuke中Cookie存在设计问题，可导致攻击者以任意用户访问应用系统。 ASP-Nuke使用Cookie进行认证，当用户使用Cookie时，Cookie以非加密形式存储在本地系统上，攻击者可以通过修改Cookie信息，导致以任意用户权限访问ASP-Nuke系统，包括以管理员帐户权限访问。 ASP-Nuke RC1-RC2 厂商补丁： ASP-Nuke -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

ASP-Nuke RC2 存在跨站脚本(CSS/XSS)执行漏洞

BugCVE: CAN-2002-0521 BUGTRAQ: 4477 ASP-Nuke是一款基于WEB的系统架构程序，运行在多种Unix和Linux系统下，也可运行于Windows平台下。 ASP-Nuke对用户输入过滤上存在漏洞，可使远程攻击者利用在论坛上发贴对其他浏览用户进行跨站脚本执行攻击。 ASP-Nuke中的downloads.asp和post.asp在处理用户提供的输入没有过滤相关的脚本代码，攻击者可以构建包含恶意脚本代码的内容提交给连接，当其他用户浏览相关此连接的时候，脚本将在用户的浏览器中执行。攻击者可能借此得到用户基于Cookie的认证信 ASP-Nuke RC2...

CVE-2004-2296

CVE-2004-2296 affects the PHP-Nuke Reviews module (versions 6.0–7.3) where the preview_review function on Windows allows a remote attacker to obtain sensitive information by supplying an invalid date parameter, which triggers an error message. The vulnerability is described as a potential partial...

CVE-2004-2294

CVE-2004-2294 affects PHP-Nuke 6.0 through 7.3, where the send_review function in the Reviews module has a canonicalize-before-filter error. Text parameter processing allows remote attackers to inject arbitrary web script or HTML via hex-encoded XSS sequences after the text is checked for dangero...

CVE-2004-2295

CVE-2004-2295 involves a SQL injection in the Reviews module of PHP-Nuke versions 6.0 through 7.3. The vulnerability allows remote attackers to execute arbitrary SQL commands by manipulating the order parameter, enabling potential data disclosure or modification. The provided documents identify t...

CVE-2004-2293

Multiple cross-site scripting XSS vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via the 1 eid parameter or 2 query parameter to the Encyclopedia module, 3 previewreview function in the Reviews module as demonstrated by the url, cover,...

CVE-2004-2297

The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service CPU and memory consumption via a large, out-of-range score parameter...

CVE-2004-2295

SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the order parameter...

CVE-2004-2293

PHP-Nuke 6.0–7.3 is affected by multiple XSS flaws in the Encyclopedia module (via the eid parameter or the module query), in Reviews module via the preview_review function (parameters: url, cover, rlanguage, hits), and in Reviews via savecomment (uname parameter). Root cause: improper handling o...

CVE-2004-2296

The previewreview function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which generates an error message...