PT-2008-2889 · Php Nuke · Php-Nuke

Name of the Vulnerable Software and Affected Versions: PHP-Nuke affected versions not specified Description: A SQL injection issue exists, allowing remote attackers to execute arbitrary SQL commands. This is achieved by manipulating the cat parameter in a viewcat action to modules.php...

CVE-2008-1308: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Sudirman Angriawan NukeC30 3.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the idcatg parameter in a ViewCatg action to modules.php...

CVE-2008-1298: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in a viewcat action to modules.php...

CVE-2008-1314: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in the Johannes Hass gaestebuch 2.2 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in an edit action to modules.php...

PHP-Nuke zClassifieds Module - cat SQL Injection

PHP-Nuke zClassifieds Module - cat SQL Injection source: https://www.securityfocus.com/bid/28211/info The zClassifieds module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

PHP-Nuke Module NukeC30 sql injection

------------------------------------------------------------- ----- H-T Team HouSSaMix + ToXiC350 from MoroCCo -------- ------------------------------------------------------------- = Author : HouSSaMix from H-T Team = Script : PHP-Nuke Module NukeC30 Module's Name: NukeC30 Module's Version: 3.0 ...

PHP-Nuke zClassifieds Module - 'cat' SQL Injection

source: https://www.securityfocus.com/bid/28211/info The zClassifieds module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHP-Nuke NukeC30 3.0 Module - id_catg SQL Injection

PHP-Nuke NukeC30 3.0 Module - idcatg SQL Injection source: https://www.securityfocus.com/bid/28197/info The NukeC30 module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...

PHP-Nuke Hadith 'cat' SQL注入漏洞

BUGTRAQ ID: 28171 CNCAN ID:CNCAN-2008031111 PHP-Nuke Hadith是一款基于PHP的WEB应用程序。 PHP-Nuke Hadith不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞进行SQL注入攻击，可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'cat'参数处理缺少充分过滤，提交恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Kemas Yunus Antonius Sunnah and Hadith 目前没有详细解决方案提供：...

PHP-Nuke NukeC30 3.0 Module - 'id_catg' SQL Injection

source: https://www.securityfocus.com/bid/28197/info The NukeC30 module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...

Sql injection

SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the roomid parameter in an index action to modules.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

Sql injection

SQL injection vulnerability in the Kutub-i Sitte KutubiSitte 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid parameter in a hadisgoster action to modules.php...

CVE-2008-1220

SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the roomid parameter in an index action to modules.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2008-1219

SQL injection vulnerability in the Kutub-i Sitte KutubiSitte 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid parameter in a hadisgoster action to modules.php...

CVE-2008-1220

SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the roomid parameter in an index action to modules.php. NOTE: the provenance of this information is unknown; the details are obtained solely from third party informatio...

CVE-2008-1219

The vulnerability is in Kutub-i Sitte (KutubiSitte) version 1.1, a PHP-Nuke module. It allows SQL injection via the kid parameter in a hadisgoster action to modules.php, enabling remote attackers to execute arbitrary SQL commands. The connected PT-2008-2812 entry provides a mitigation: restrict a...

CVE-2008-1220

SQL injection vulnerability (CVE-2008-1220) affects the 4nChat 0.91 module for PHP-Nuke. The flaw allows remote attackers to inject arbitrary SQL via the roomid parameter in the index action of modules.php, potentially impacting confidentiality, integrity, and availability as indicated by the CVS...

CVE-2008-1219

SQL injection vulnerability in the Kutub-i Sitte KutubiSitte 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid parameter in a hadisgoster action to modules.php...

PHP-Nuke Hadith Module - cat SQL Injection

PHP-Nuke Hadith Module - cat SQL Injection source: https://www.securityfocus.com/bid/28171/info The Hadith module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow...

PHP-Nuke 4nAlbum Module 0.92 - pid SQL Injection

PHP-Nuke 4nAlbum Module 0.92 - pid SQL Injection source: https://www.securityfocus.com/bid/28162/info The 4nAlbum module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue coul...