Lucene search
+L

2033 matches found

seebug.org
seebug.org
added 2014/07/01 12:0 a.m.24 views

PHP-Nuke 7.8 Mainfile.PHP SQL Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/16831/info PHP-Nuke is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could all...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.22 views

PHP-Nuke 6.x Multiple Module SQL Injection Vulnerabilities

No description provided by source. source: http://www.securityfocus.com/bid/9544/info Multiple SQL injection vulnerabilities have been reported in various modules included in PHP-Nuke versions 6.9 and earlier. These issues could permit remote attackers to compromise PHP-Nuke administrative...

7.1AI score
SaveExploits0
seebug.org
seebug.org
added 2014/07/01 12:0 a.m.19 views

PHP-Nuke 6.x/7.x FAQ Module categories Parameter XSS

No description provided by source. source: http://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple...

7.1AI score
SaveExploits0
NVD
NVD
added 2014/06/02 2:55 p.m.24 views

CVE-2014-3934

SQL injection vulnerability in the SubmitNews module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics parameter to modules.php...

7.5CVSS8.4AI score0.02178EPSS
SaveExploits1References2
Prion
Prion
added 2014/06/02 2:55 p.m.17 views

Sql injection

SQL injection vulnerability in the SubmitNews module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics parameter to modules.php...

7.5CVSS9.1AI score0.02178EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
added 2014/06/02 2:0 p.m.34 views

CVE-2014-3934

SQL injection vulnerability in the SubmitNews module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics parameter to modules.php...

8.4AI score0.02178EPSS
SaveExploits1References2
CVE
CVE
added 2014/06/02 2:0 p.m.56 views

CVE-2014-3934

CVE-2014-3934 is a SQL injection vulnerability in the Submit_News module of PHP-Nuke 8.3, exploitable via topics[] in modules.php to execute arbitrary SQL. Impact is partial confidentiality/integrity/availability. Exploitation details are supported by NVD/RedHat entries; CIRCL shows an exploit on...

7.5CVSS8.7AI score0.02178EPSS
SaveExploits1References2Affected Software2
Packet Storm
Packet Storm
added 2014/05/24 12:0 a.m.32 views

PHP-Nuke 8.3 News SQL Injection

title : phpnuke 8.3 sql injection vulnerability Exploit Title: phpnuke 8.3 submit news module sql injection vulnerability Google Dork: inurl:modules.php?name=SubmitNews Date: 5/24/2014 Exploit Author: ali ahmady -- Iranian Researcher snip3rirathotmail.com Vendor Homepage: phpnuke.org Software Lin...

SaveExploits0
exploitpack
exploitpack
added 2014/05/24 12:0 a.m.19 views

PHP-Nuke Submit_News Component - SQL Injection

PHP-Nuke SubmitNews Component - SQL Injection source: https://www.securityfocus.com/bid/67656/info PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the...

0.1AI score
SaveExploits0
Exploit DB
Exploit DB
added 2014/05/24 12:0 a.m.30 views

PHP-Nuke 'Submit_News' Component - SQL Injection

source: https://www.securityfocus.com/bid/67656/info PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. An attacker can exploit this issue to compromise the application, access or modify data, or exploi...

7.4AI score
SaveExploits0
0day.today
0day.today
added 2014/05/20 12:0 a.m.22 views

PHP-Nuke Web Links SQL Injection Vulnerability

PHP-Nuke Web Links suffers from a remote SQL injection vulnerability. PHP-Nuke moduleWeb Links - Sql Injection Vulnerabilty =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : email protected , email protected .:. Home :...

8.1AI score
SaveExploits0
Packet Storm
Packet Storm
added 2014/05/19 12:0 a.m.22 views

PHP-Nuke Web Links SQL Injection

PHP-Nuke moduleWeb Links - Sql Injection Vulnerabilty =================================================================== .:. Author : AtT4CKxT3rR0r1ST .:. Contact : [email protected] , [email protected] .:. Home : http://www.iphobos.com/blog/ .:. Script : https://www.phpnuke.org/ .:. Dork :...

0.1AI score
SaveExploits0
0day.today
0day.today
added 2014/04/29 12:0 a.m.31 views

NULL NUKE CMS 2.2 - Multiple Vulnerabilities

NULL NUKE CMS version 2.2 suffers from cross site request forgery, cross site scripting, arbitrary file deletion, remote command execution, arbitrary file access, directory traversal, open redirection, and remote shell upload vulnerabilities NULL NUKE CMS v2.2 Multiple Vulnerabilities Vendor:...

7.5AI score
SaveExploits0
Exploit DB
Exploit DB
added 2014/04/29 12:0 a.m.18 views

NULL NUKE CMS 2.2 - Multiple Vulnerabilities

NULL NUKE CMS v2.2 Multiple Vulnerabilities Vendor: nullwanton Product web page: http://sourceforge.net/projects/nullnuke/ Affected version: 2.2 and 2.1 rc3 Summary: NULL-8x3-NUKE is a fast, powerful and secure cross platform CMS for windows and Linux using base or full drive paths. Desc: NULL...

7.4AI score
SaveExploits0
Zero Science Lab
Zero Science Lab
added 2014/04/28 12:0 a.m.33 views

NULL NUKE CMS v2.2 Multiple Vulnerabilities

Summary NULL-8x3-NUKE is a fast, powerful and secure cross platform CMS for windows and Linux using base or full drive paths. Description NULL NUKE CMS suffers from multiple remote vulnerabilities including Stored/Reflected XSS, SQL Injection, Arbitrary File Upload, RCE, Arbitrary File Deletion,...

5.8AI score
SaveExploits0
seebug.org
seebug.org
added 2014/04/01 12:0 a.m.55 views

ASP-Nuke 'gotourl.asp'开放重定向漏洞

Bugtraq ID:66523 ASP-Nuke是一款基于WEB的系统架构程序,运行在多种Unix和Linux系统下,也可运行于Windows平台下。 ASP-Nuke允许攻击者构建恶意URI,诱使用户解析,可重定向用户通信,进行网络钓鱼等攻击。 0 ASP-Nuke 2.0.7 目前没有详细解决方案: http://www.asp-nuke.com/ http://host/gotoURL.asp?url=Open Redirectionid=43569...

7.1AI score
SaveExploits0
0day.today
0day.today
added 2014/03/30 12:0 a.m.29 views

ASP-Nuke 2.0.7 - (gotourl.asp) Open Redirect Vulnerability

Exploit for asp platform in category web applications + ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl + Date: 28/03/2014 + Risk: Low + Remote: Yes + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.aspnuke.it/ + Contact: email protected + Tested on: Windows 7 and Linux +...

7.1AI score
SaveExploits0
exploitpack
exploitpack
added 2014/03/29 12:0 a.m.16 views

ASP-Nuke 2.0.7 - gotourl.asp Open Redirect

ASP-Nuke 2.0.7 - gotourl.asp Open Redirect + ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl + Date: 28/03/2014 + Risk: Low + Remote: Yes + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.aspnuke.it/ + Contact: [email protected] + Tested on: Windows 7 and Linux +...

7.4AI score
SaveExploits0
Exploit DB
Exploit DB
added 2014/03/29 12:0 a.m.29 views

ASP-Nuke 2.0.7 - 'gotourl.asp' Open Redirect

ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl + Date: 28/03/2014 + Risk: Low + Remote: Yes + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.aspnuke.it/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: gotourl.asp + Version: ASP-Nuke...

7.4AI score
SaveExploits0
Packet Storm
Packet Storm
added 2014/03/28 12:0 a.m.24 views

ASP-Nuke 2.0.7 Open Redirect

ASP-Nuke 2.0.7 - Open Redirect Vulnerability in gotourl + Date: 28/03/2014 + Risk: Low + Remote: Yes + Author: Felipe Andrian Peixoto + Vendor Homepage: http://www.aspnuke.it/ + Contact: [email protected] + Tested on: Windows 7 and Linux + Vulnerable File: gotourl.asp + Version: ASP-Nuke...

7.4AI score
SaveExploits0
Rows per page
Query Builder