2033 matches found
CVE-2008-4804
The CVE-2008-4804 entry describes an SQL injection in the Gallery module 1.3 for PHP-Nuke, allowing remote attackers to execute arbitrary SQL via the aid parameter in showalbum (index.php). Affected component: Gallery module 1.3 for PHP-Nuke; root cause: unsanitized input in the showalbum action ...
CVE-2008-4804
SQL injection vulnerability in the Gallery module 1.3 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the aid parameter in a showalbum action to index.php. NOTE: some of these details are obtained from third party information. NOTE: this issue was disclosed by an...
phpnukecurrent-sql.txt
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability PHP-Nuke Module CurrentIssue summary&id AuTh0r : EhsanHp200 H0ME : www.only-4dl.tk Email : [email protected] Dork : "inurl:modules.php?name=CurrentIssue" Exploite:...
phpnukebook-sql.txt
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability PHP-Nuke 8.1 Module BookCatalog category&catid AuTh0r : EhsanHp200 H0ME : www.only-4dl.tk Email : [email protected] Persian Gulf 4 Ever! Dork : "inurl:modules.php?name=BookCatalog" Exploite for username:...
phpnukesectionsnew-sql.txt
IRANIAN THE BEST HACKERS IN THE WORLD Remote SQL injection Vulnerability PHP-Nuke Module Sectionsnew printpage&artid AuTh0r : Ehsanhp200 H0ME : www.only-4dl.tk Email : [email protected] Persian Gulf 4 Ever! Dork : "inurl:modules.php?name=Sectionsnew" Exploite:...
Unrestricted file upload
Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploading a file with 1 .htm, 2 .html, or 3 .txt extensions, then accessing it via a direct request to the file. NOTE: the provenance of this information is unknown;...
CVE-2008-4767
Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploading a file with 1 .htm, 2 .html, or 3 .txt extensions, then accessing it via a direct request to the file. NOTE: the provenance of this information is unknown;...
CVE-2008-4767
The CVE-2008-4767 entry describes an unrestricted file upload vulnerability in the DownloadsPlus module of PHP-Nuke. An attacker could upload a file with .htm, .html, or .txt extensions and then access it directly to trigger arbitrary code execution. The description notes uncertainty about how .h...
PHP-Nuke Module League (team&tid) XSS Vulnerability
IRANIAN THE BEST HACKERS IN THE WORLD XSS Vulnerability PHP-Nuke Module League team&tid AuTh0r : EhsanHp200 H0ME : www.only4-dl.tk Email : [email protected] PERSIAN GULF 4 EVER! Dork : "inurl:modules.php?name=League" Exploite: www.victim.com/modules.php?name=League&file=index&op=team&tid=Xss...
PHP-Nuke Nuke League Module - tid Cross-Site Scripting
PHP-Nuke Nuke League Module - tid Cross-Site Scripting source: https://www.securityfocus.com/bid/31952/info PHP-Nuke Nuke League module is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execu...
PHP-Nuke Module League (team&tid) XSS Vulnerability
IRANIAN THE BEST HACKERS IN THE WORLD XSS Vulnerability PHP-Nuke Module League team&tid AuTh0r : EhsanHp200 H0ME : www.only4-dl.tk Email : [email protected] PERSIAN GULF 4 EVER! Dork : "inurl:modules.php?name=League" Exploite: www.victim.com/modules.php?name=League&file=index&op=team&tid=Xss...
PHP-Nuke Nuke League Module - 'tid' Cross-Site Scripting
source: https://www.securityfocus.com/bid/31952/info PHP-Nuke Nuke League module is prone to a cross-site scripting vulnerability because it fails to sufficiently sanitize user-supplied input data. An attacker may leverage this issue to execute arbitrary script code in the browser of an...
PHP-Nuke管理权限泄露
PHP-Nuke Web Portal System存在一个权限确认错误，通过提交一个特殊的URL请求， 远程用户有可能获取管理员权限。 1.0/2.5 升级到PHP-Nuke 3.0: Francisco Burzi PHP-Nuke 2.5: Francisco Burzi upgrade Nuke-3.0.tar.gz http://www.ncc.org.ve/php-nuke.php3?op=download&location=http://download.sourceforge.net/phpnuke&file=PHP-Nuke-3.0.tar.gz Francisco...
PHP-Nuke Sarkilar Module - id SQL Injection
PHP-Nuke Sarkilar Module - id SQL Injection source: https://www.securityfocus.com/bid/31830/info Sarkilar module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow ...
PHP-Nuke Sarkilar Module - 'id' SQL Injection
source: https://www.securityfocus.com/bid/31830/info Sarkilar module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...
Nuke ET <= 3.4 (fckeditor) Remote Arbitrary File Upload Exploit
No description provided by source. ?php / --------------------------------------------------------------- Nuke ET = 3.4 fckeditor Remote Arbitrary File Upload Exploit --------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....:...
Nuke ET <= 3.4 (fckeditor) Remote Arbitrary File Upload Exploit
Exploit for unknown platform in category web applications =============================================================== Nuke ET = 3.4 fckeditor Remote Arbitrary File Upload Exploit =============================================================== ?php /...
Nuke ET 3.4 - 'FCKeditor' Arbitrary File Upload
?php / --------------------------------------------------------------- Nuke ET = 3.4 fckeditor Remote Arbitrary File Upload Exploit --------------------------------------------------------------- author...: EgiX mail.....: n0b0d13satgmaildotcom link.....: http://www.truzone.org/ This PoC was...
phpnukereview2-sql.txt
!/usr/bin/perl -w PHP-NUKE module Reviews2 id SQL injetion vulnerability Author : boom3rang Kosova Hackers Group www.khg-crew.ws Greetz : H!tm@N, KHG, chs, redc00de, pr0xy-ki11er. ! ModuleName: Reviews2 ! ScriptName: PHP-NUKE ! GoogleDork: inurl:"modules.php?name=Reviews2" system"color FF0000";...
ASP-Nuke <= 0.80 article.asp articleid变量远程SQL注入漏洞
BugCVE: CVE-2005-2067 BUGTRAQ: 13318 ASP-Nuke处理用户请求时存在输入验证漏洞，远程攻击者可以利用此漏洞非授权访问数据库。 ASP-Nuke的article.asp脚本没有正确过滤articleid参数数据，远程攻击可以在输入中插入特定的SQL语句，从而非授权操作数据库，导致敏感信息泄露或ASP-Nuke被完全控制。 ASP-Nuke = 0.80 厂商补丁： ASP-Nuke -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...