1914 matches found
CVE-2005-3368
Cross-site scripting XSS vulnerability in the SearchEnhanced module in PHP-Nuke 7.9 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2005-3368
Cross-site scripting XSS vulnerability in the SearchEnhanced module in PHP-Nuke 7.9 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
CVE-2005-3368
The CVE-2005-3368 entry describes a Cross-site scripting (XSS) vulnerability in the PHP-Nuke 7.9 Search_Enhanced module. The issue allows remote attackers to inject arbitrary web script or HTML via the query parameter, potentially affecting user sessions or displayed content. Affected product: PH...
CVE-2005-3368: Undefined Security Weakness
Cross-site scripting XSS vulnerability in the SearchEnhanced module in PHP-Nuke 7.9 allows remote attackers to inject arbitrary web script or HTML via the query parameter...
PHP-Nuke-XSS.txt
i am sorry but i had a little problem with my old e-mail address , my new one is [email protected] the mail: PHP-Nuke Search Cross-Site Scripting Vulnerability Vulnerable: i think all ver. data:2005-09-5 The search field at modules.php?name=SearchEnhanced is vulnerable to html injection attacks...
PHP-Nuke Cross-Site Scripting Vulnerability
i am sorry but i had a little problem with my old e-mail address , my new one is [email protected] the mail: PHP-Nuke Search Cross-Site Scripting Vulnerability Vulnerable: i think all ver. data:2005-09-5 The search field at modules.php?name=SearchEnhanced is vulnerable to html injection attacks...
CVE-2005-3304
Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via 1 the username parameter in the Your Account page, 2 the url parameter in the Downloads module, and 3 the description parameter in the WebLinks module...
PHP-Nuke Search Enhanced Module 1.1/2.0 - HTML Injection
source: https://www.securityfocus.com/bid/15218/info Search Enhanced module for is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated content. Attacker-supplied HTML and scri...
CVE-2005-3304
Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via 1 the username parameter in the Your Account page, 2 the url parameter in the Downloads module, and 3 the description parameter in the WebLinks module...
CVE-2005-3304
CVE-2005-3304 concerns multiple SQL injection vulnerabilities in PHP-Nuke 7.8. The flaws allow remote attackers to modify SQL queries and, in one case, execute arbitrary PHP code via (1) the username parameter on the Your Account page, (2) the url parameter in the Downloads module, and (3) the de...
CVE-2005-3304: Undefined Security Weakness
Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via 1 the username parameter in the Your Account page, 2 the url parameter in the Downloads module, and 3 the description parameter in the WebLinks module...
CVE-2005-3281
Directory traversal vulnerability in NukeFixes 3.1 for PHP-Nuke 7.8 allows remote attackers to include arbitrary files via the file parameter...
CVE-2005-3281
CVE-2005-3281 affects NukeFixes 3.1 for PHP-Nuke 7.8, with a directory traversal flaw that lets remote attackers include arbitrary files via the file parameter. The NVD entry and Red Hat advisory corroborate this description. CVSSv2 base score is 5.0 (Medium): network access, low attack complexit...
CVE-2005-3281: Undefined Security Weakness
Directory traversal vulnerability in NukeFixes 3.1 for PHP-Nuke 7.8 allows remote attackers to include arbitrary files via the file parameter...
[SA17218] PHP-Nuke NukeFixes Addon "file" Local File Inclusion Vulnerability
TITLE: PHP-Nuke NukeFixes Addon "file" Local File Inclusion Vulnerability SECUNIA ADVISORY ID: SA17218 VERIFY ADVISORY: http://secunia.com/advisories/17218/ CRITICAL: Moderately critical IMPACT: Exposure of sensitive information WHERE: From remote SOFTWARE: NukeFixes 3.x addon for PHP-Nuke...
PHP-Nuke Search Module - modules.php Directory Traversal
PHP-Nuke Search Module - modules.php Directory Traversal source: https://www.securityfocus.com/bid/15137/info PHPNuke Search Module is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. A remote attacker may view files that are only...
CVE-2005-3016
Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack vectors...
CVE-2005-3016
Technical details are not publicly available in the provided documents for CVE-2005-3016. No concrete information on affected products, versions, root cause, or remediation is provided; monitor for updates.