1914 matches found
PHP-Nuke <= 7.9 Final (phpbb_root_path) Remote File Inclusions
No description provided by source. Milli-Harekat Advisory www.milli-harekat.org PHP-Nuke = All version - Remote File Include Vulnerabilities Risk : High Class: Remote Script : PHP NUKE ALL VERSION Credits : ERNE Thanks : DjReMix,Eskobar,TRIP,ßy KorsaN,OsL3m7,Poizonbox,Dilejyoner and All MHG USERS...
PHP-Nuke 7.6 Banners.PHP Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/13026/info PHP-Nuke is reportedly affected by a cross-site scripting vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input. An attacker may leverage this issue to have...
PHP-Nuke 4nAlbum Module 0.92 - 'pid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28162/info The 4nAlbum module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
PHP-Nuke Book Catalog Module 1.0 'upload.php' Arbitrary File Upload Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/19890/info The Book Catalog module for PHP-Nuke is prone to a vulnerability that lets attackers upload arbitrary files. Exploiting this issue may allow an attacker to compromise the application and the underlying system;...
PHP-Nuke 'Seminars' Module - 'fileName' Parameter Local File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28089/info The PHP-Nuke 'Seminars' module is prone to a local file-include vulnerability because it fails to properly sanitize user-supplied input. Exploiting this issue may allow an unauthorized remote user to view files...
PHP-Nuke Yellow_Pages Module - 'cid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/28109/info The YellowPages module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
PHP-Nuke Recipe Module 1.3 - 'recipeid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27955/info The Recipe module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an...
Search Enhanced Module 1.1/2.0 for PHP-Nuke HTML Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15218/info Search Enhanced module for is prone to an HTML injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in dynamically generated conten...
PHP-Nuke 6.x/7.0 'News' Module Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/9605/info It has been reported that the PHP-Nuke module 'News' is prone to a cross-site scripting vulnerability. The issue arises due to the module failing to properly sanitize user-supplied information. This could allow...
PHP-Nuke 7.1 Recommend_Us Module fname Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/9879/info It has been reported that PHP-Nuke may be prone to multiple cross-site scripting vulnerabilities. These vulnerabilities occur due to insufficient sanitization of user-supplied data via the 'Your Name', 'nicname'...
PHP-Nuke Error Manager Module 2.1 error.php Multiple Variables XSS
No description provided by source. source: http://www.securityfocus.com/bid/9911/info It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional conditions and simple design errors. These issu...
PHP-NUKE 5.0 - Viewslink Remote SQL Injection
No description provided by source. Author: CMD Contact: [email protected] Dork: allinurl: op=viewslink&sid= =-==-==-==-==-==-==-==C==M==D==-==-==-==-==-==-==-==-==-==-==-= Code : Exploit 1: /links.php?op=viewslink&sid=-1//union//select//0,aid//from//nukeauthors//where//radminsuper=1/...
PHP-Nuke 8.0 'main/tracking/userLog.php' SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/35117/info PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...
PHP-Nuke 7.8 Mainfile.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16831/info PHP-Nuke is prone to an SQL-injection vulnerability. This issue is due to a failure in the application to properly sanitize user-supplied input before using it in an SQL query. Successful exploitation could all...
PHP-Nuke <= 8.0 (Web_Links Module) Remote Blind SQL Injection Exploit
No description provided by source. PHP-Nuke = 8.0 WebLinks Module Remote Blind SQL Injection Exploit Author: yawn Contact Me: http://www.unitx.net E-Mail: [email protected] Requirements: magicquotesgpc : off Greetings: [email protected] | [email protected] | Dante90 He had but little gold within...
PHP-Nuke < 8.0 (sid) Remote SQL Injection Exploit
No description provided by source. ?php errorreporting EERROR; inisetmaxexecutiontime,0; echo ' +=========================================+ | RST/GHC unpublished PHP Nuke exploit 8 | +=========================================+ + version 8.0 + Tested on 7.9 & 6.0 '; if $argc 2 print Usage: . $argv...
PHP-Nuke Sections Module - 'artid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27879/info The PHP-Nuke Sections module is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacke...
PHP-Nuke 6.x/7.x Encyclopedia Module Multiple Function XSS
No description provided by source. source: http://www.securityfocus.com/bid/10524/info PHP-Nuke is prone to multiple vulnerabilities. The issues result from insufficient sanitization of user-supplied data. The following specific issues can affect the application: PHP-Nuke is prone to multiple...
Protector System 1.15 blocker_query.php Multiple Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/10206/info Multiple vulnerabilities were reported to exist in Protector System, which is a third-party module for PHP-Nuke. Cross-site scripting and SQL injection vulnerabilities were reported. Exploitation of these issue...
PHP-Nuke Kleinanzeigen Module 'lid' Parameter SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/30577/info The Kleinanzeigen module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow a...