CVE-2003-1545: Improper Limitation of a Pathname to a Restricted Directory

Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in the file parameter. NOTE: This was originally reported as an issue in PHP-Nuke 6.5, but this is an independent addon...

PHP-Nuke Module My_eGallery 2.7.9 - SQL Injection

Aria-Security Team http://Aria-Security.Net ----------------------------- Shoutz: Aura, Null, imm02tal, Kinglet, and our staff PHP-Nuke MyeGallery "gid" Remote SQL Injection Dork: inurl:"modules.php?name=MyeGallery"...

Sql injection

Multiple SQL injection vulnerabilities in the KoseYazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a 1 viewarticle or 2 printpage action to modules.php...

CVE-2008-1053

Multiple SQL injection vulnerabilities in the KoseYazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a 1 viewarticle or 2 printpage action to modules.php...

CVE-2008-1053

Kose_Yazilari module for PHP-Nuke contains multiple SQL injection vulnerabilities. The flaw allows remote attackers to modify the artid parameter in the viewarticle or printpage actions on modules.php to inject and execute arbitrary SQL commands. This is the core risk described across CVE-2008-10...

CVE-2008-1053

Multiple SQL injection vulnerabilities in the KoseYazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a 1 viewarticle or 2 printpage action to modules.php...

CVE-2008-1053: Improper Neutralization of Special Elements used in an SQL Command

Multiple SQL injection vulnerabilities in the KoseYazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a 1 viewarticle or 2 printpage action to modules.php...

php-nuke sql injection reportaj [secid]

PHP-Nuke reportaj SQL Injection Vulnerability secid modules.php?name=roportaj&op=listarticles&secid= pwd = -12F2A2A2Funion2F2A2A2Fselect2F2A2A2F02Cpwd2F2A2A2Ffrom2F2A2A2Fnukeauthors2F2A2A2Fwhere2F2A2A2Fradminsuper3D12F2A user=...

phpnukekose-sql.txt

CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PHP-Nuke KoseYazilari SQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net WHEN YOU PUT THIS SQL CODE YOU can SEE ADMýN NAME,ADMIN HASH DorK 1 : ''name KoseYazilari op viewarticle artid'' Dork 2 : ''na...

phpnukereportaj-sql.txt

PHP-Nuke reportaj SQL Injection Vulnerability secid modules.php?name=roportaj&op=listarticles&secid= pwd = -1%2F%2A%2A%2Funion%2F%2A%2A%2Fselect%2F%2A%2A%2F0%2Cpwd%2F%2A%2A%2Ffrom%2F%2A%2A%2Fnukeauthors%2F%2A%2A%2Fwhere%2F%2A%2A%2Fradminsuper%3D1%2F%2A user=...

Php Nuke "Sell" module SQL Injection ("cid")

Aria-Security Team Persian Security Network http://Aria-Security.Net ------------------------------------------------------------------------ Shoutz: Aura, imm02tal, Kinglet, iM4n Php Nuke "Sell" module SQL Injection "cid"...

PHP-Nuke Module Kose_Yazilari (artid) SQL Injection Vulnerability

No description provided by source. CoRPITX Turkey www.Hayalet-hack.com www.zone-turk.net/ PHP-Nuke KoseYazilari SQL Injection Vulnerability AUTHOR : xcorpitx HOME : www.Hayalet-hack.com / www.zone-turk.net WHEN YOU PUT THIS SQL CODE YOU can SEE ADMN NAME,ADMIN HASH DorK 1 : ''name KoseYazilari op...

CVE-2008-0934

SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idcatg parameter in a ViewCatg action...

Sql injection

SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idcatg parameter in a ViewCatg action...

CVE-2008-0934

The CVE-2008-0934 entry documents a SQL injection in the NukeC 2.1 module for PHP-Nuke, exploitable via the id_catg parameter in a ViewCatg action. Affected component/file: modules.php; vulnerability type: SQL injection allowing remote arbitrary SQL execution. Impact details in sources indicate p...

CVE-2008-0934

SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idcatg parameter in a ViewCatg action...

phpnukequran-sql.txt

php-nuke Quran SQL Injectionsurano AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAİL : [email protected] DORK 1 : allinurl: "modules php name Quran"surano DORK 2 : allinurl: "modules php name Quran" EXPLOIT : admin...

PHP-Nuke Sell Module - cid SQL Injection

PHP-Nuke Sell Module - cid SQL Injection source: https://www.securityfocus.com/bid/27980/info The 'Sell' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...

PHP-Nuke Module Kose_Yazilari (artid) SQL Injection Vulnerability

Exploit for unknown platform in category web applications ================================================================= PHP-Nuke Module KoseYazilari artid SQL Injection Vulnerability ================================================================= CoRPITX Turkey PHP-Nuke KoseYazilari SQL...

phpnukesell-sql.txt

Aria-Security Team Persian Security Network http://Aria-Security.Net ------------------------------------------------------------------------ Shoutz: Aura, imm02tal, Kinglet, iM4n Php Nuke "Sell" module SQL Injection "cid"...