1914 matches found
php-nuke Kuran SQL Injection(surano)
php-nuke Kuran SQL Injectionsurano AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: "modules php name Kuran"surano DORK 2 : allinurl: "modules php name Kuran" EXPLOIT : admin...
php nuke gallery SQL Injection(aid)
php nuke gallery SQL Injectionaid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl:"index.php?module=gallery"aid DORK 2 : allinurl: EXPLOIT :...
php-nuke Recipes SQL Injection(recipeid)
php-nuke Recipes SQL Injectionrecipeid AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: "modules.php?name=Recipes"op=viewrecipe DORK 2 : allinurl: "modules.php?name=Recipes"recipeid EXPLOIT : after recipeid...
php-nuke Quran SQL Injection(surano)
php-nuke Quran SQL Injectionsurano AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl: "modules php name Quran"surano DORK 2 : allinurl: "modules php name Quran" EXPLOIT : admin...
php nuke Sections SQL Injection(print)
php nuke Sections SQL Injectionprint AUTHOR : S@BUN HOME : http://www.milw0rm.com/author/1334 MAL : [email protected] DORK 1 : allinurl:"imodules.php?name=Sections"artid DORK 2 : allinurl: EXPLOIT :...
PHP-Nuke Recipe Module 1.3 - recipeid SQL Injection
PHP-Nuke Recipe Module 1.3 - recipeid SQL Injection source: https://www.securityfocus.com/bid/27955/info The Recipe module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue...
PHP-Nuke Okul模块'okulid' SQL注入漏洞
BUGTRAQ ID: 27909 CNCAN ID:CNCAN-2008022207 PHP-Nuke Okul模块是一款基于PHP的WEB应用程序。 PHP-Nuke Okul模块不正确过滤用户提交的URI数据,远程攻击者可以利用漏洞进行SQL注入攻击,可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'okulid'参数处理缺少充分过滤,提交恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息或操作数据库。 PHP-Nuke Okul Module 1.0 目前没有详细解决方案提供: http://www.phpnuke.org/...
PHP-Nuke Gallery 1.3 Module - 'artid' SQL Injection
source: https://www.securityfocus.com/bid/27957/info The Gallery module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application...
PHP-Nuke EasyContent模块'page_id' SQL注入漏洞
BUGTRAQ ID: 27897 CNCAN ID:CNCAN-2008022206 PHP-Nuke EasyContent模块是一款基于PHP的WEB应用程序。 PHP-Nuke EasyContent模块不正确过滤用户提交的URI数据,远程攻击者可以利用漏洞进行SQL注入攻击,可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'pageid'参数处理缺少充分过滤,提交恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息或操作数据库。 PHP-Nuke EasyContent Module 目前没有详细解决方案提供: http://www.phpnuke.org/...
PHP-Nuke Docum模块'artid' SQL注入漏洞
BUGTRAQ ID: 27912 CNCAN ID:CNCAN-2008022208 PHP-Nuke Docum模块是一款基于PHP的WEB应用程序。 PHP-Nuke Docum模块不正确过滤用户提交的URI数据,远程攻击者可以利用漏洞进行SQL注入攻击,可获得敏感信息或操作数据库。 问题是由于脚本对用户提交的'artid'参数处理缺少充分过滤,提交恶意SQL查询作为参数数据,可更改原来的SQL逻辑,获得敏感信息或操作数据库。 PHP-Nuke Module Docum 目前没有详细解决方案提供: http://www.phpnuke.org/...
PHP-Nuke Recipe Module 1.3 - 'recipeid' SQL Injection
source: https://www.securityfocus.com/bid/27955/info The Recipe module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the application,...
PHP-Nuke Gallery 1.3 Module - artid SQL Injection
PHP-Nuke Gallery 1.3 Module - artid SQL Injection source: https://www.securityfocus.com/bid/27957/info The Gallery module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...
Sql injection
SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php...
CVE-2008-0922
SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php...
CVE-2008-0922
SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php...
CVE-2008-0922
CVE-2008-0922 concerns the Manuales 0.1 module for PHP-Nuke, where a vulnerability in the viewdownload action of modules.php allows SQL injection through the cid parameter. The root cause is not deeply detailed in the provided documents beyond the SQL injection description. The vulnerability can ...
Sql injection
SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter...
Sql injection
SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle operation...