2034 matches found
PHP-Nuke 6.x/7.x Downloads Module Lid Parameter Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13011/info It is reported that the PHP-Nuke 'Downloads' module is affected by a cross-site scripting vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI input. This...
PHP-Nuke Module Emporium <= 2.3.0 - Remote SQL Injection Exploit
No description provided by source...
PHP-Nuke 8.0 Downloads Module 'query' Parameter Cross Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35180/info PHP-Nuke is prone to a cross-site scripting vulnerability because it fails to properly sanitize user-supplied input. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
PHP-Nuke 6.x/7.x 'Reviews' Module Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9613/info It has been reported that the PHP-Nuke module 'Reviews' is prone to a cross-site scripting vulnerability. The issue arises due to the module failing to properly sanitize user-supplied information. This could all...
PHP-NUKE version <= 6.9 - 'cid' SQL Injection Remote Exploit
No description provided by source. !/usr/bin/perl -w use IO::Socket; THIS CODE PUBLIC NOW = \ \ / | \ | / | / / \ | | \ | /\ \ / || /// | / / / / based on 'cid' sql injection vuln in Download module, more info about this vuln u can see here: http://rst.void.ru/texts/advisory10.htm work only...
PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit
No description provided by source. ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...
Protector System 1.15 b1 index.php SQL Injection
No description provided by source. source: http://www.securityfocus.com/bid/10206/info Multiple vulnerabilities were reported to exist in Protector System, which is a third-party module for PHP-Nuke. Cross-site scripting and SQL injection vulnerabilities were reported. Exploitation of these issue...
AllMyGuests <= 0.4.1 (cfg_serverpath) Remote File Include Vulnerability
No description provided by source. ============================================================================ AllMyGuests = ?AMGconfigcfgserverpath Remote File Inclusion Exploit ============================================================================ Scirpt Infected signin.php Critical leve...
ASP-Nuke 1.0/1.2/1.3 - Remote User Database Access Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9355/info A problem has been identified in ASP-Nuke when user credentials are stored on a system. Because of this, an attacker may be able to gain unauthorized access to sensitive information...
PHP-Nuke 7.6 Web_Links Module Multiple SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13055/info The WebLinks module of PHP-Nuke is affected by multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL querie...
PHP-Nuke 6.5 - Multiple Downloads Module SQL Injection Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/7588/info PHP-Nuke is reportedly prone to multiple SQL injection vulnerabilities in the Downloads module. Exploitation could allow for injection of malicious SQL syntax, resulting in modification of SQL query logic or oth...
ASPNuke 0.80 Language_Select.ASP HTTP Response Splitting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/14063/info ASPNuke is prone to an HTTP response splitting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. A remote attacker may exploit this vulnerability to...
PHP-Nuke <= 8.0 Final (INSERT) Blind SQL Injection Exploit (mysql)
No description provided by source. !/usr/bin/perl 0day exploit for PHP-nuke =8.0 Final Blind sql injection attack in INSERT syntax version for mysql = 4.0.24, using 'brute force' Coded by:Maciej krasza [email protected] Screenshot: 0day exploit for PHP-nuke =8.0 Final Sql injection attack in...
PHP-Nuke 6.x/7.0 Survey Module SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9305/info A vulnerability has been reported to exist in the Survey module of PHP-Nuke that may allow a remote attacker to inject malicious SQL syntax into database queries. The source of this issue is insufficient...
PCAnywhere 12.5.0 build 463 Denial of Service
No description provided by source. !/usr/bin/python ''' Exploit Title: PCAnywhere Nuke Date: 2/16/12 Author: Johnathan Norman spoofy at exploitscience.org or @spoofyroot Version: PCAnyWhere 12.5.0 build 463 and below Tested on: Windows Description: The following code will crash the awhost32...
PHP-Nuke 7.6 Web_Links Module Multiple Cross-Site Scripting Vulnerabilities
No description provided by source. source: http://www.securityfocus.com/bid/13025/info PHP-Nuke is reportedly affected by multiple cross-site scripting vulnerabilities in the WebLinks Module. These issues are due to a failure in the application to properly sanitize user-supplied input. An attacke...
PHP-Nuke Dance Music Module Index.PHP Local File Include Vulnerability
No description provided by source...
PHP-Nuke addon Nuke Mobile Entartainment 1.0 - LFI Vulnerability
No description provided by source. Nuke Mobile Entartainment = modulename Local File Include Vuln Script : Nuke Mobile Entartainment Version : 1 Download : http://www.suonerie-polifoniche-gratis.net/mobilentertainment.zip BorN To K!LL AsbMay's Group ... Vuln. Code : include...
PHP-Nuke <= 7.8 (modules.php) SQL Injection Exploit
No description provided by source. / PHP-Nuke =7.8 SQL injection exploit need MySQL 4.0 coded by 1dt.w0lf RST/GHC http://rst.void.ru http://ghc.ru / // tested on 7.8 include stdio.h include string.h include sys/types.h include sys/socket.h include netinet/in.h include netdb.h include regex.h defi...
PHP-Nuke Downloads Module 'url' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/33410/info The Downloads module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...