CVE-2006-6255

Direct static code injection vulnerability in util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chatterbot, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension in the filename parameter and code in the moreinfo...

CVE-2006-6255

Direct static code injection vulnerability in util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chatterbot, allows remote attackers to upload and execute arbitrary PHP code via a filename with a .php extension in the filename parameter and code in the moreinfo...

CVE-2006-6234

Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via 1 the cid parameter in a listpagescategories action or 2 the pid parameter in a showpage action...

CVE-2006-6234

Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via 1 the cid parameter in a listpagescategories action or 2 the pid parameter in a showpage action...

CVE-2006-6234

Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via 1 the cid parameter in a listpagescategories action or 2 the pid parameter in a showpage action...

CVE-2006-6234

CVE-2006-6234 affects the Content module in PHP-Nuke 6.0 (and possibly other versions). The vulnerability is a SQL injection allowing remote attackers to execute arbitrary SQL commands via (1) the cid parameter in a list_pages_categories action or (2) the pid parameter in a showpage action. The N...

CVE-2006-6234: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via 1 the cid parameter in a listpagescategories action or 2 the pid parameter in a showpage action...

CVE-2006-6200

Multiple SQL injection vulnerabilities in the 1 ratearticle and 2 ratecomplete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2006-6217

PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the modulename parameter...

CVE-2006-6202

PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chatterbot, allows remote attackers to execute arbitrary PHP code via a URL in the AIbasedir parameter...

CVE-2006-6202

PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chatterbot, allows remote attackers to execute arbitrary PHP code via a URL in the AIbasedir parameter...

CVE-2006-6217

PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the modulename parameter...

CVE-2006-6202

Summary of CVE-2006-6202: PHP remote file inclusion vulnerability in the NukeAI 0.0.3 Beta module for PHP-Nuke. The issue affects the modules/NukeAI/util.php component, where an attacker can supply a URL in the AIbasedir parameter to cause remote code execution by including arbitrary PHP. The pro...

CVE-2006-6217

The CVE describes a PHP remote file inclusion vulnerability in formdisp.php of the Mermaid 1.2 module for PHP-Nuke, allowing remote attackers to execute arbitrary PHP code via a URL supplied in the module_name parameter. Affected software: Mermaid 1.2 module for PHP-Nuke. Root cause: improper han...

CVE-2006-6200

The CVE-2006-6200 entry describes multiple SQL injection vulnerabilities in the News module of PHP-Nuke (version 7.9 and earlier). Specifically, the rate_article and rate_complete functions in modules/News/index.php are affected when magic_quotes_gpc is disabled, allowing remote attackers to exec...

CVE-2006-6200

Multiple SQL injection vulnerabilities in the 1 ratearticle and 2 ratecomplete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2006-6200: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the 1 ratearticle and 2 ratecomplete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2006-6217: Undefined Security Weakness

PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the modulename parameter...

cra.pl.txt

!/usr/bin/perl PHP-Nuke Mermaid Module V1.2 formdisp.php Remote File Include Exploit SiberSavascilar.CoM secuirty - Hacking Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl perl cra.pl http://site.com/ http://site.com/cmd.txt cmd cmd shell example: cmd...

PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl PHP-Nuke Mermaid Module V1.2 formdisp.php Remote File Include Exploit SiberSavascilar.CoM secuirty - Hacking Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl target cmd shell location cmd shell variable pe...