Nuked-klaN 1.7 Sections Module - 'artid' SQL Injection

source: https://www.securityfocus.com/bid/15181/info Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These vulnerabilities could permit remote attackers to...

Nuked-klaN 1.7 Links Module - link_id SQL Injection

Nuked-klaN 1.7 Links Module - linkid SQL Injection source: https://www.securityfocus.com/bid/15181/info Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. Thes...

Nuked-klaN 1.7 Forum Module - Multiple SQL Injections

source: https://www.securityfocus.com/bid/15181/info Nuked Klan is prone to multiple SQL injection vulnerabilities. These issues are due to a failure in the application to properly sanitize user-supplied input before using it in SQL queries. These vulnerabilities could permit remote attackers to...

CVE-2004-1937

CVE-2004-1937 refers to multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b that allow remote attackers to read or include arbitrary files via .. sequences in parameters to index.php, update.php, or globals loading order, potentially modifying globals in the process. The issu...

CVE-2004-1937

Multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers to read or include arbitrary files via .. sequences in 1 the userlangue parameter to index.php or 2 the langue parameter to update.php, or modify arbitrary GLOBAL variables by causing globals.php to be...

CVE-2004-1937

Multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers to read or include arbitrary files via .. sequences in 1 the userlangue parameter to index.php or 2 the langue parameter to update.php, or modify arbitrary GLOBAL variables by causing globals.php to be...

[SA13329] Nuked-Klan "Links" Module Script Insertion Vulnerability

TITLE: Nuked-Klan "Links" Module Script Insertion Vulnerability SECUNIA ADVISORY ID: SA13329 VERIFY ADVISORY: http://secunia.com/advisories/13329/ CRITICAL: Moderately critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: Nuked-Klan 1.x http://secunia.com/product/1015/ DESCRIPTION:...

Nuked-klaN 1.x - Submit Link Function HTML Injection

Nuked-klaN 1.x - Submit Link Function HTML Injection source: https://www.securityfocus.com/bid/11733/info NuKed-Klan 'submit URI link' function is reported prone to a HTML injection vulnerability. It is reported that the issue exists due to a lack of sufficient input validation performed on the...

SCSA028.txt

================================================= Security Corporation Security Advisory SCSA-028 Nuked-Klan Multiple Vulnerabilities ================================================= PROGRAM: Nuked-KlaN HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: b1.4, b1.5, SP2 RISK: MEDIUM/HIGH...

[SCSA-028] Nuked-Klan Multiple Vulnerabilities

================================================= Security Corporation Security Advisory SCSA-028 Nuked-Klan Multiple Vulnerabilities ================================================= PROGRAM: Nuked-KlaN HOMEPAGE: http://www.nuked-klan.org VULNERABLE VERSIONS: b1.4, b1.5, SP2 RISK: MEDIUM/HIGH...

Nuked-Klan index.php user_langue Parameter Traversal Arbitrary File Access

Nuked-klan is installed on the remote host. There is a bug in this version that could allow an attacker to include php files hosted on a third-party website, thus allowing an attacker to execute arbitrary commands on this host. Another bug allows an attacker to read arbitrary files on the remote...

Nuked-klaN 1.x - Multiple Vulnerabilities

Nuked-klaN 1.x - Multiple Vulnerabilities source: https://www.securityfocus.com/bid/10104/info Nuked-Klan is prone to multiple vulnerabilities. These issues include information disclosure via inclusion of local files, an issue that may permit remote attackers to corrupt configuration files and an...

Nuked-klaN 1.x - Multiple Vulnerabilities

source: https://www.securityfocus.com/bid/10104/info Nuked-Klan is prone to multiple vulnerabilities. These issues include information disclosure via inclusion of local files, an issue that may permit remote attackers to corrupt configuration files and an SQL injection vulnerability. - To include...

CVE-2003-1370

Multiple cross-site scripting XSS vulnerabilities in Nuked-Klan 1.2b allow remote attackers to inject arbitrary HTML or web script via 1 the Author field in the Guestbook module, 2 the Titre or Pseudo fields in the Forum module, or 3 "La Tribune Libre" in the Shoutbox module...

CVE-2003-1371

Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the 1 Team, 2 News, or 3 Liens modules...

CVE-2003-1238

Cross-site scripting vulnerability XSS in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the 1 Team, 2 News, and 3 Liens modules...

Nuked-Klan 1.2b Multiple Vulnerabilities

It is possible to execute arbitrary PHP code on the remote host using a flaw in the 'Nuked Klan' package. An attacker may leverage this flaw to leak information about the remote system or even execute arbitrary commands. In addition to this problem, this service is vulnerable to various cross-sit...

Nuked-klaN 1.3 - Remote Information Disclosure

Nuked-klaN 1.3 - Remote Information Disclosure source: https://www.securityfocus.com/bid/6917/info A vulnerability has been discovered in Nuked-Klan which may be exploited to execute certain PHP functions on a target server. This issue occurs in the 'Team', 'News', and 'Lien' modules and is due t...

Nuked-klaN 1.3 - Remote Information Disclosure

source: https://www.securityfocus.com/bid/6917/info A vulnerability has been discovered in Nuked-Klan which may be exploited to execute certain PHP functions on a target server. This issue occurs in the 'Team', 'News', and 'Lien' modules and is due to insufficient sanitization of user-supplied UR...

Nuked-Klan 1.3 - Multiple Cross-Site Scripting Vulnerabilities

Nuked-Klan 1.3 Multiple Cross Site Scripting Vulnerabilities. CVE-2003-1238. Webapps exploit for php platform source: http://www.securityfocus.com/bid/6916/info It has been reported that Nuked-Klan beta 1.3 is prone to cross site scripting attacks. The problem occurs in the 'Team', 'News', and...