nukedklan17.txt

Nuked Klan then you only have to go to http://site.com/cookies.txt, and you have the cookies of all the persons who have seen your signature Greetz to : Macromedia Flash Software, and every body who know us...

Nuked Klan <= 1.7 Remote Cookie Disclosure Exploit

Nuked Klan = 1.7 Remote Cookie Disclosure Exploit - Vendor : www.nuked-klan.org/ - Found by NeoSSJ & Kad' - Full disclosure on 31 December 2006 - Notice : you only have to create a .swf file, and you put on :...

CVE-2006-4480

Incomplete blacklist vulnerability in the nkCSS function in nuked.php in Nuked-Klan 1.7 SP4.3 allows remote attackers to bypass anti-XSS features and inject arbitrary web script or HTML via JavaScript in an attribute value that is not in the blacklist, as demonstrated using the STYLE attribute of...

CVE-2006-4480

CVE-2006-4480 affects Nuked-Klan 1.7 SP4.3. The issue is an incomplete blacklist in the nk_CSS function (nuked.php) that can bypass anti‑XSS protections, allowing remote attackers to inject arbitrary script/HTML via a JavaScript payload in an attribute value not covered by the blacklist (demonstr...

CVE-2006-4480

Incomplete blacklist vulnerability in the nkCSS function in nuked.php in Nuked-Klan 1.7 SP4.3 allows remote attackers to bypass anti-XSS features and inject arbitrary web script or HTML via JavaScript in an attribute value that is not in the blacklist, as demonstrated using the STYLE attribute of...

Nuked Klan 1.7 SP4.3 : Function Anti-XSS Bypassed

// - BEGIN - // By Blwood // http://blwood.net http://blwood.net/ We can bypassed the function anti-xss called nkCSS nuked.php using like this : b id="blwood" style="width:expressionalert' http://www.blwood.net' http://www.blwood.net272929/"/b Here is the function : function nkCSS$str if $str != ...

Nuked Klan 1.7 SP4.3 : Function Anti-XSS Bypassed

// - BEGIN - // By Blwood // http://blwood.net http://blwood.net/ We can bypassed the function anti-xss called nkCSS nuked.php using like this : b id="blwood" style="width:expressionalert' http://www.blwood.net' http://www.blwood.net272929/"/b Here is the function : function nkCSS$str if $str != ...

CVE-2006-3479

Cross-site request forgery CSRF vulnerability in the delblock function in modules/Admin/block.php in Nuked-Klan 1.7.5 and earlier and 1.7 SP4.2 allows remote attackers to delete arbitrary "blocks" via a link with a modified bid parameter in a delblock op on the block page in index.php...

CVE-2006-3479

The CVE describes a Cross-site Request Forgery (CSRF) bug in Nuked-Klan before and including 1.7 SP4.2. The del_block function in modules/Admin/block.php is vulnerable; a remote attacker can delete arbitrary blocks by following a crafted link that alters the bid parameter in a del_block operation...

CVE-2006-3479

Cross-site request forgery CSRF vulnerability in the delblock function in modules/Admin/block.php in Nuked-Klan 1.7.5 and earlier and 1.7 SP4.2 allows remote attackers to delete arbitrary "blocks" via a link with a modified bid parameter in a delblock op on the block page in index.php...

CSRF in Nuked Klan 1.7 SP4.2

Discovered by Blwood http://www.blwood.net CSRF : Cross Site Request Forgery If admin click on a link like this http://www.site.com/index.php?file=Admin&page=block&op=delblock&bid=X Where X is an ID of a block Block ID X will be destroyed... Nuked Klan Website : http://www.nuked-klan.org/...

nuked-SQL.txt

+nuked-klan +www.nuked-klan.org +founded By Moroccan Security Team +special 10x to:CiM-TeaM,Esp!onLeRaVaGe,nabil,Dranzelz,SnIpErSA,www.lezr.com +exemple +http://target/index.php?file=Calendar&m=sql&y=2006 +have nice day...

Sql injection

SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...

CVE-2006-1419

SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...

CVE-2006-1419

CVE-2006-1419 describes an SQL injection in the Calendar module of nuked-klan, affecting 1.7.5 and earlier. The vulnerability allows remote attackers to inject arbitrary SQL via the m parameter to index.php, potentially impacting data integrity. The available records confirm the affected software...

CVE-2006-1419

SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php...

nuked-klan<=1.7.5 SQL Injection

+nuked-klan +www.nuked-klan.org +founded By Moroccan Security Team +special 10x to:CiM-TeaM,Esp!onLeRaVaGe,nabil,Dranzelz,SnIpErSA,www.lezr.com +exemple +http://target/index.php?file=Calendar&m=sql&y=2006 +have nice day...

Nuked-klaN 1.x - 'index.php' SQL Injection

source: https://www.securityfocus.com/bid/17233/info Nuked-Klan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to compromise the...

Nuked-klaN 1.x - index.php SQL Injection

Nuked-klaN 1.x - index.php SQL Injection source: https://www.securityfocus.com/bid/17233/info Nuked-Klan is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. A successful exploit cou...

nukedXSS.txt

NightWarrior nightwarrior771athotmail.com Nuked-klaN Cross-Site Scripting Vulnerability http://www.nuked-klan.org http://www.example.com/index.php?file=Members&letter=XSS Contact :nightwarrior771athotmail.com NightWarrior...