ASP-Nuke <= 0.80 article.asp articleid变量远程SQL注入漏洞

BugCVE: CVE-2005-2067 BUGTRAQ: 13318 ASP-Nuke处理用户请求时存在输入验证漏洞，远程攻击者可以利用此漏洞非授权访问数据库。 ASP-Nuke的article.asp脚本没有正确过滤articleid参数数据，远程攻击可以在输入中插入特定的SQL语句，从而非授权操作数据库，导致敏感信息泄露或ASP-Nuke被完全控制。 ASP-Nuke = 0.80 厂商补丁： ASP-Nuke -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...

CVE-2008-3888

SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a memberdetails action...

CVE-2008-3888

The CVE concerns Mini-NUKE Freehost 2.3, where a SQL injection vulnerability exists in members.asp. The flaw allows remote attackers to send a crafted uid in the member_details action to execute arbitrary SQL commands. Exploitation details or live exploit info are not provided in the documents. N...

CVE-2008-3888

SQL injection vulnerability in members.asp in Mini-NUKE Freehost 2.3 allows remote attackers to execute arbitrary SQL commands via the uid parameter in a memberdetails action...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PHP-Nuke: crossite scripting...

Mini-NUKE v2.3 Freehost (tr) Multiple Remote SQL Injection Vulnerabilities

Exploits admin user name : http://localhost/mininuke/members.asp?action=memberdetails&uid=1+union+select+0,kuladi,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27+from+members+where+seviye=1 admin password :...

Cross-Site Scripting vulnerability in PHP-Nuke

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Cross-Site Scripting уязвимости в системе PHP-Nuke. XSS: http://site/modules.php?name=News&file=print&sid=3Cscript20src=http://site/script.js20 Уязвима версия PHP-Nuke 7.0 и предыдущие версии. Дополнительная информация о данной уязвимости у меня н...

CVE-2008-3573

The CAPTCHA implementation in 1 Pligg 9.9.5 and possibly 2 Francisco Burzi PHP-Nuke 8.1 provides a critical random number the tsrandom value within the URL in the SRC attribute of an IMG element, which allows remote attackers to pass the CAPTCHA test via a calculation that combines this value wit...

CVE-2008-3573

The CVE-2008-3573 vulnerability affects the CAPTCHA implementations in Pligg 9.9.5 and possibly PHP-Nuke 8.1. A critical ts_random value is embedded in the IMG SRC URL, allowing remote attackers to pass the CAPTCHA by calculating a value that combines ts_random with the current date and the HTTP ...

CVE-2008-3573

The CAPTCHA implementation in 1 Pligg 9.9.5 and possibly 2 Francisco Burzi PHP-Nuke 8.1 provides a critical random number the tsrandom value within the URL in the SRC attribute of an IMG element, which allows remote attackers to pass the CAPTCHA test via a calculation that combines this value wit...

CVE-2008-3513

SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to modules.php...

Sql injection

SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to modules.php...

Sql injection

SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a visit action to modules.php...

CVE-2008-3512

SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a visit action to modules.php...

CVE-2008-3513

The CVE-2008-3513 entry describes a SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke. The flaw is triggered via the catid parameter in a category action to modules.php, allowing remote attackers to execute arbitrary SQL commands. The vulnerability is rated HIGH with a CVSS ...

CVE-2008-3512

The CVE-2008-3512 entry concerns a SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke. The affected component is the module’s visit action in modules.php, where the lid parameter is unsafely used in SQL queries. This allows remote attackers to craft input that could alter or exf...

CVE-2008-3513

SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to modules.php...

CVE-2008-3512

SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a visit action to modules.php...

PHP-NUKE module Kleinanzeigen SQL injection (lid)

Rbt-4 crew http://www.rbt-4.net Author : Lovebug ---------------------------- Remote Sql injection Php-Nuke module name Kleinanzeigen modules.php?name=Kleinanzeigen&aop=visit&lid=sql Exploit username :...

PHP-Nuke Kleinanzeigen Module - lid SQL Injection

PHP-Nuke Kleinanzeigen Module - lid SQL Injection source: https://www.securityfocus.com/bid/30577/info The Kleinanzeigen module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this iss...