CVE-2006-6234: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via 1 the cid parameter in a listpagescategories action or 2 the pid parameter in a showpage action...

CVE-2006-6202

PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chatterbot, allows remote attackers to execute arbitrary PHP code via a URL in the AIbasedir parameter...

CVE-2006-6200

Multiple SQL injection vulnerabilities in the 1 ratearticle and 2 ratecomplete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2006-6217

PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the modulename parameter...

CVE-2006-6217

PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the modulename parameter...

CVE-2006-6202

Summary of CVE-2006-6202: PHP remote file inclusion vulnerability in the NukeAI 0.0.3 Beta module for PHP-Nuke. The issue affects the modules/NukeAI/util.php component, where an attacker can supply a URL in the AIbasedir parameter to cause remote code execution by including arbitrary PHP. The pro...

CVE-2006-6202

PHP remote file inclusion vulnerability in modules/NukeAI/util.php in the NukeAI 0.0.3 Beta module for PHP-Nuke, aka Program E is an AIML chatterbot, allows remote attackers to execute arbitrary PHP code via a URL in the AIbasedir parameter...

CVE-2006-6200

The CVE-2006-6200 entry describes multiple SQL injection vulnerabilities in the News module of PHP-Nuke (version 7.9 and earlier). Specifically, the rate_article and rate_complete functions in modules/News/index.php are affected when magic_quotes_gpc is disabled, allowing remote attackers to exec...

CVE-2006-6200

Multiple SQL injection vulnerabilities in the 1 ratearticle and 2 ratecomplete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the sid parameter...

CVE-2006-6217

The CVE describes a PHP remote file inclusion vulnerability in formdisp.php of the Mermaid 1.2 module for PHP-Nuke, allowing remote attackers to execute arbitrary PHP code via a URL supplied in the module_name parameter. Affected software: Mermaid 1.2 module for PHP-Nuke. Root cause: improper han...

CVE-2006-6217: Undefined Security Weakness

PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the modulename parameter...

CVE-2006-6200: Undefined Security Weakness

Multiple SQL injection vulnerabilities in the 1 ratearticle and 2 ratecomplete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the sid parameter...

PHP-Nuke News Module Index.PHP SQL注入漏洞

PHP-Nuke News是一款基于PHP-Nuke的一个新闻模块。 PHP-Nuke News不充分过滤用户提交的URI输入，远程攻击者可以利用漏洞进行SQL注入攻击，获得敏感信息。 问题是'Index.PHP'脚本对用户提交的'sid'参数缺少过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息。 PHP-Nuke PHP-Nuke 7.9 PHP-Nuke PHP-Nuke 7.8 PHP-Nuke PHP-Nuke 7.7 PHP-Nuke PHP-Nuke 7.6 PHP-Nuke PHP-Nuke 7.5 PHP-Nuke PHP-Nuke 7.4...

PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl PHP-Nuke Mermaid Module V1.2 formdisp.php Remote File Include Exploit SiberSavascilar.CoM secuirty - Hacking Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl target cmd shell location cmd shell variable pe...

cra.pl.txt

!/usr/bin/perl PHP-Nuke Mermaid Module V1.2 formdisp.php Remote File Include Exploit SiberSavascilar.CoM secuirty - Hacking Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl perl cra.pl http://site.com/ http://site.com/cmd.txt cmd cmd shell example: cmd...

nst-30.txt

/ -------------------------------------------------------- Neo Security Team NST - Advisory 30 - 2006-11-24 -------------------------------------------------------- Program: PHP-Nuke Homepage: http://www.phpnuke.org Vulnerable Versions: PHP-Nuke sqlfetchrow$db-sqlquery"SELECT title FROM...

PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit

No description provided by source. !/usr/bin/perl PHP-Nuke Mermaid Module V1.2 formdisp.php Remote File Include Exploit SiberSavascilar.CoM secuirty - Hacking Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl target cmd shell location cmd shell variable pe...

PHP-Nuke Mermaid Module V1.2 (formdisp.php) Remote File Include Exploit

!/usr/bin/perl PHP-Nuke Mermaid Module V1.2 formdisp.php Remote File Include Exploit SiberSavascilar.CoM secuirty - Hacking Bug Found & coded By CrackersChild [email protected] Kullanimi perl cra.pl target cmd shell location cmd shell variable perl cra.pl http://site.com/...

PHP-Nuke <= 7.9 News module "sid" SQL Injection vulnerabilities

/ -------------------------------------------------------- Neo Security Team NST - Advisory 30 - 2006-11-24 -------------------------------------------------------- Program: PHP-Nuke Homepage: http://www.phpnuke.org Vulnerable Versions: PHP-Nuke = 7.9 Risk: Medium Impact: Medium Risk -==PHP-Nuke ...

PHP-Nuke NukeAI Module 3b (util.php) Remote File Include Exploit

Exploit for unknown platform in category web applications ================================================================ PHP-Nuke NukeAI Module 3b util.php Remote File Include Exploit ================================================================ !/usr/bin/perl...