2033 matches found
Nuke Evolution Xtreme 2.0 - Local File Inclusion SQL Injection
Nuke Evolution Xtreme 2.0 - Local File Inclusion SQL Injection source: https://www.securityfocus.com/bid/47552/info Nuke Evolution Xtreme is prone to a local file-include vulnerability and an SQL-injection vulnerability. An attacker can exploit the local file-include vulnerability using...
Nuke Evolution Xtreme 2.0 - Local File Inclusion / SQL Injection
source: https://www.securityfocus.com/bid/47552/info Nuke Evolution Xtreme is prone to a local file-include vulnerability and an SQL-injection vulnerability. An attacker can exploit the local file-include vulnerability using directory-traversal strings to view and execute arbitrary local files...
XSS, AoF и IAA уязвимости в PHP-Nuke
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting, Abuse of Functionality и Insufficient Anti-automation уязвимостях в PHP-Nuke. XSS WASC-08: POST запрос на странице http://site/modules.php?name=Downloads " style="-moz-binding:url'http://websecurity.com.ua/webtools/xss.xmlxss...
PHP-Nuke 8.0 (mod Surveys) SQL Injection Vulnerability
Exploit for php platform in category web applications Title : PHP-Nuke 8.0 mod Surveys SQL Injection Vulnerability Author : KedAns-Dz E-mail : email protected Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote SQL Injection Tested ...
PHP-Nuke 8.0 Surveys Module SQL Injection
Title : PHP-Nuke 8.0 mod Surveys SQL Injection Vulnerability Author : KedAns-Dz E-mail : [email protected] Home : HMD/AM 30008/04300 - Algeria -00213555248701 Twitter page : twitter.com/kedans platform : php Impact : Remote SQL Injection Tested on : Windows XP sp3 FR Note : BAC 2011 Enchallah Me ...
PHP-Nuke 8. x <= "chng_uid" blind defect and repair-vulnerability warning-the black bar safety net
Affected version: PHP-Nuke 8. x = Vulnerability description: PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articles with users system. Each user can submit comments to discuss the articles. Main features...
PHP-Nuke 8.x <= "chng_uid" Blind SQL Injection Vulnerability
PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articles with users system. Each user can submit comments to discuss the articles. Main features include: web based admin, surveys, top page, access stats pag...
PHP-Nuke 8.x Cross Site Scripting
PHP-Nuke 8.x = Cross Site Scripting Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower are vulnerable to Cross Site Scrtipting. 2. BACKGROUND PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articl...
PHP-Nuke 8.x <= Cross Site Request Forgery (CSRF) / Anti-CSRF Bypass Vulnerability
PHP-Nuke 8.x = Cross Site Request Forgery CSRF / Anti-CSRF Bypass Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower versions are vulnerable to Cross Site Request Forgery CSRF because its Anti-CSRF mechanism Referer Check is found to be broken. 2. BACKGROUND PHP-Nuke is a Web Portal...
PHP-Nuke 8.x <= "chng_uid" Blind SQL Injection Vulnerability
PHP-Nuke 8.x = Blind SQL Injection Vulnerability 1. OVERVIEW The administration backend of PHP-Nuke 8.x is vulnerable to Blind SQL Injection. 2. BACKGROUND PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and...
PHP-Nuke 8.x <= Cross Site Scripting Vulnerability
PHP-Nuke 8.x = Cross Site Scripting Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower are vulnerable to Cross Site Scrtipting. 2. BACKGROUND PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articl...
PHP-Nuke 8.x <= Cross Site Scripting Vulnerability
PHP-Nuke 8.x = Cross Site Scripting Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower are vulnerable to Cross Site Scrtipting. 2. BACKGROUND PHP-Nuke is a Web Portal System or content management system. The goal of PHP-Nuke is to have an automated web site to distribute news and articl...
PHP-Nuke 8.x Cross Site Request Forgery
PHP-Nuke 8.x = Cross Site Request Forgery CSRF / Anti-CSRF Bypass Vulnerability 1. OVERVIEW The PHP-Nuke version 8.x and lower versions are vulnerable to Cross Site Request Forgery CSRF because its Anti-CSRF mechanism Referer Check is found to be broken. 2. BACKGROUND PHP-Nuke is a Web Portal...
PHP-Nuke 8.x Blind SQL Injection
PHP-Nuke 8.x /admin.php POST...
PHP-Nuke 8.0 Cross Site Scripting
Hello list! I want to warn you about Insufficient Anti-automation and Cross-Site Scripting vulnerabilities in PHP-Nuke. SecurityVulns ID: 11485. ------------------------- Affected products: ------------------------- Vulnerable are PHP-Nuke 8.0 and previous versions. ---------- Details: ----------...
Новые уязвимости в PHP-Nuke
Здравствуйте 3APA3A! Сообщаю вам о найденных мною новых Insufficient Anti-automation и Cross-Site Scripting уязвимостях в системе PHP-Nuke. Insufficient Anti-automation WASC-21: http://site/modules.php?name=SubmitNews В форме нет защиты от автоматизированных запросов капчи. XSS WASC-08:...
PHP-Nuke Shell Upload
PHP-Nuke Shell Upload Vulnerability By : h311 c0d3 Contact : [email protected] Home : Black-Hat.cc Dork : inurl:modules.php?name=Upload Exploit : 1- you should first install Tamper Data from here https://addons.mozilla.org/en-us/firefox/addon/tamper-data/ 2- start tamper then, upload your shell as...
PHP-Nuke <= 8.1.0.3.5b (Downloads) Remote Blind SQL Injection Exploit
Exploit for php platform in category web applications !/usr/bin/perl 0-Day PHP-Nuke / / / / / / / / . ||/ | .. / | / // / | | \ \ \ \ \ / || |||| / | || \ /|| / / / /...
PHP-Nuke 8.1 Cross Site Scripting
Hello list! I want to warn you about Cross-Site Scripting and Insufficient Anti-automation vulnerabilities in PHP-Nuke. SecurityVulns ID: 11343. ------------------------- Affected products: ------------------------- Vulnerable are PHP-Nuke 8.1 and previous versions. Tested in PHP-Nuke 8.0 and 8.1...
XSS и IAA уязвимости в PHP-Nuke
Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting та Insufficient Anti-automation уязвимостях в PHP-Nuke. XSS WASC-08: POST запрос на странице http://site/modules.php?name=Search " style="-moz-binding:url'http://websecurity.com.ua/webtools/xss.xmlxss' В поле поиска. Это верси...