PHP-Nuke 7.5 7.8 - Search SQL Injection

PHP-Nuke 7.5 7.8 - Search SQL Injection / | | | | | | | / | | | | | |/ \ | | --- | |----| | \ \ || | | | || / Copyright C 2006 Untruth Labs Critical sql injection in phpNuke 7.5-7.8 Exploit coded by unitedbr greetz: paulin, barros, xgc found by Janek Vind "waraxe" Original advisory:...

PHP-Nuke 7.5 < 7.8 - 'Search' SQL Injection

/ | | | | | | | / | | | | | |/ \ | | --- | |----| | \ \ || | | | || / Copyright C 2006 Untruth Labs Critical sql injection in phpNuke 7.5-7.8 Exploit coded by unitedbr greetz: paulin, barros, xgc found by Janek Vind "waraxe" Original advisory: http://www.waraxe.us/advisory-46.html...

PHP-Nuke 7.5 - 7.8 (Search) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== PHP-Nuke 7.5 - 7.8 Search Remote SQL Injection Exploit ======================================================== / | | | | | | | / | | | | | |/ \ | | --- | |----| | \ \ || | | | || /...

dragonflycms9.0.6.1.txt

Multiple Cross site scripting in dragonflycms 9.0.6.1 Vendor url:http://dragonflycms.org/ Advisore: http://lostmon.blogspot.com/2006/02/ multiple-cross-site-scripting-in.html Vendor notify: exploit available: yes Description: "Dragonfly CMS is a powerful, feature-rich, Open Source content...

Design/Logic Flaw

The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent HTTPUSERAGENT, which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying tha...

CVE-2006-0805

The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent HTTPUSERAGENT, which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying tha...

CVE-2006-0805

The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent HTTPUSERAGENT, which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying tha...

CVE-2006-0805

The CVE-2006-0805 issue affects php-Nuke 6.0–7.9 where CAPTCHA uses fixed challenge/response pairs that vary only daily based on the User-Agent. An attacker can bypass CAPTCHA by fixing HTTP_USER_AGENT, performing a valid challenge/response, and replaying that pair in the random_num and gfx_check...

CVE-2006-0805: Undefined Security Weakness

The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent HTTPUSERAGENT, which allows remote attackers to bypass CAPTCHA controls by fixing the User Agent, performing a valid challenge/response, then replaying tha...

PHP-Nuke 7.x - CAPTCHA Bypass

PHP-Nuke 7.x - CAPTCHA Bypass source: https://www.securityfocus.com/bid/16722/info The CAPTCHA implementation of PHPNuke may be bypassed by remote attackers due to a design error. This may be used to carry out other attacks such as brute-force attempts against the login page. ------ real life...

PHP-Nuke 7.x - CAPTCHA Bypass

source: https://www.securityfocus.com/bid/16722/info The CAPTCHA implementation of PHPNuke may be bypassed by remote attackers due to a design error. This may be used to carry out other attacks such as brute-force attempts against the login page. ------ real life exploit ------ phpNuke CAPTHCA...

CVE-2006-0679

SQL injection vulnerability in index.php in the YourAccount module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL commands via the username variable Nickname field...

Sql injection

SQL injection vulnerability in index.php in the YourAccount module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL commands via the username variable Nickname field...

CVE-2006-0679

SQL injection vulnerability in index.php in the YourAccount module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL commands via the username variable Nickname field...

CVE-2006-0679

PHP-Nuke 7.8 and earlier is vulnerable to a SQL injection in the Your_Account module (index.php) via the username field, enabling remote attackers to manipulate SQL queries. The vulnerability is demonstrated in the Your_Account workflow (e.g., new_user) where user input is not properly sanitized ...

CVE-2006-0679: Undefined Security Weakness

SQL injection vulnerability in index.php in the YourAccount module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL commands via the username variable Nickname field...

Cross site scripting

Cross-site scripting XSS vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter...

CVE-2006-0676

Cross-site scripting XSS vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter...

CVE-2006-0676

Cross-site scripting XSS vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to inject arbitrary web script or HTML via the pagetitle parameter...

CVE-2005-4715

Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magicquotesgpc is disabled, allow remote attackers to execute arbitrary SQL commands via the 1 name, 2 sid, and 3 pid parameters in a POST request, which bypasses security checks that are performed for GET requests...