[SCSA-028] Nuked-Klan Multiple Vulnerabilities

================================================= Security Corporation Security Advisory SCSA-028 Nuked-Klan Multiple Vulnerabilities ================================================= PROGRAM: Nuked-KlaN HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: b1.4, b1.5, SP2 RISK: MEDIUM/HIGH...

Nuked-klaN 1.x - Multiple Vulnerabilities

Nuked-klaN 1.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/10104/info Nuked-Klan is prone to multiple vulnerabilities. These issues include information disclosure via inclusion of local files, an issue that may permit remote attackers to corrupt configuration files and an...

Nuked-klaN 1.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/10104/info Nuked-Klan is prone to multiple vulnerabilities. These issues include information disclosure via inclusion of local files, an issue that may permit remote attackers to corrupt configuration files and an SQL injection vulnerability. - To include...

CVE-2003-1370

Multiple cross-site scripting XSS vulnerabilities in Nuked-Klan 1.2b allow remote attackers to inject arbitrary HTML or web script via 1 the Author field in the Guestbook module, 2 the Titre or Pseudo fields in the Forum module, or 3 "La Tribune Libre" in the Shoutbox module...

Nuked-Klan 1.2b Multiple Vulnerabilities

It is possible to execute arbitrary PHP code on the remote host using a flaw in the 'Nuked Klan' package. An attacker may leverage this flaw to leak information about the remote system or even execute arbitrary commands. In addition to this problem, this service is vulnerable to various cross-sit...

Nuked-Klan 1.3 - Multiple Cross-Site Scripting Vulnerabilities

Nuked-Klan 1.3 Multiple Cross Site Scripting Vulnerabilities. CVE-2003-1238. Webapps exploit for php platform source: http://www.securityfocus.com/bid/6916/info It has been reported that Nuked-Klan beta 1.3 is prone to cross site scripting attacks. The problem occurs in the 'Team', 'News', and...