1732 matches found
-==PHP Nuke <= 7.9 SQL Injection and Bypass SQL Injection Protection vulnerabilities==-
/ -------------------------------------------------------- Neo Security Team NST - Advisory 27 - 2006-10-22 -------------------------------------------------------- Program: PHP Nuke Homepage: http://www.php.net Vulnerable Versions: PHP Nuke = 7.9 Risk: High! Impact: Critical Risk -==PHP Nuke = 7...
CVE-2006-5494
Multiple PHP remote file inclusion vulnerabilities in modules/MyeGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary PHP code via a URL in the 1 adminpath or 2 basepath parameters. NOTE: this issue might overlap CVE-2006-6795...
CVE-2006-5494
Multiple PHP remote file inclusion vulnerabilities in modules/MyeGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary PHP code via a URL in the 1 adminpath or 2 basepath parameters. NOTE: this issue might overlap CVE-2006-6795...
CVE-2006-5494
CVE-2006-5494 / CVE-2006-6795 describe remote file inclusion flaws in the pandaBB module for PHP-Nuke and the My_eGallery 2.5.6 module for myPHPNuke, both allowing an attacker to execute arbitrary PHP code via a URL parameter. The core issue is PHP remote file inclusion in the gallery/displayCate...
PHP-Nuke Book Catalog模块upload.php任意文件上传漏洞
PHP-Nuke的Book Catalog模块是基于Web的软件，允许用户归档整理电子图书。 PHP-Nuke在处理文件上传时存在漏洞，远程攻击者可以利用Book Catalog模块的upload.php文件中的输入验证错误上传任意文件。 SAP Basis Community Book Catalog 1.0 厂商补丁： SAP Basis Community ------------------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
PHP-Nuke SQL注入及绕过SQL注入防护漏洞
PHP-Nuke是一个广为流行的网站创建和管理工具，它可以使用很多数据库软件作为后端，比如MySQL、PostgreSQL、mSQL、Interbase、Sybase等。 PHP-Nuke用于过滤POST输入的代码中存在SQL注入漏洞： == mainfile.php 143-146 ========================== ... if striposclone$postString,'%20union%20' OR \ striposclone$postString,'/union/' OR striposclone$postString,' union ' OR ...
PHPNuke-7.9.txt
------=Part21582213092688.1161562994664 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 7bit Content-Disposition: inline / -------------------------------------------------------- Neo Security Team NST - Advisory 27 - 2006-10-22...
PHP-Nuke <= 7.9 (Encyclopedia) Remote SQL Injection Exploit
? / Neo Security Team - Exploit made by Paisterist on 2006-10-22 http://www.neosecurityteam.net / $host="localhost"; $path="/phpnuke/"; $prefix="nuke"; $port="80"; $fp = fsockopen$host, $port, $errno, $errstr, 30; $data="query=fooaa&eid=foo'//UNION SELECT pwd as title FROM $prefixauthors WHERE...
PHP-Nuke <= 7.9 (Encyclopedia) Remote SQL Injection Exploit
Exploit for unknown platform in category web applications =========================================================== PHP-Nuke = 7.9 Encyclopedia Remote SQL Injection Exploit =========================================================== ? / Neo Security Team - Exploit made by Paisterist on 2006-10-...
PHP-Nuke <= 7.9 (Encyclopedia) Remote SQL Injection Exploit
No description provided by source. ? / Neo Security Team - Exploit made by Paisterist on 2006-10-22 http://www.neosecurityteam.net / $host="localhost"; $path="/phpnuke/"; $prefix="nuke"; $port="80"; $fp = fsockopen$host, $port, $errno, $errstr, 30; $data="query=fooaa&eid=foo'//UNION SELECT pwd as...
PHP-Nuke 7.9 - Encyclopedia SQL Injection
PHP-Nuke 7.9 - Encyclopedia SQL Injection ? / Neo Security Team - Exploit made by Paisterist on 2006-10-22 http://www.neosecurityteam.net / $host="localhost"; $path="/phpnuke/"; $prefix="nuke"; $port="80"; $fp = fsockopen$host, $port, $errno, $errstr, 30; $data="query=fooaa&eid=foo'//UNION SELECT...
PHP-Nuke 7.9 - 'Encyclopedia' SQL Injection
? / Neo Security Team - Exploit made by Paisterist on 2006-10-22 http://www.neosecurityteam.net / $host="localhost"; $path="/phpnuke/"; $prefix="nuke"; $port="80"; $fp = fsockopen$host, $port, $errno, $errstr, 30; $data="query=fooaa&eid=foo'//UNION SELECT pwd as title FROM $prefixauthors WHERE...
PHP-Nuke Book Catalog Module 1.0 - upload.php Arbitrary File Upload
PHP-Nuke Book Catalog Module 1.0 - upload.php Arbitrary File Upload source: https://www.securityfocus.com/bid/19890/info The Book Catalog module for PHP-Nuke is prone to a vulnerability that lets attackers upload arbitrary files. Exploiting this issue may allow an attacker to compromise the...
PHP-Nuke Book Catalog Module 1.0 - 'upload.php' Arbitrary File Upload
source: https://www.securityfocus.com/bid/19890/info The Book Catalog module for PHP-Nuke is prone to a vulnerability that lets attackers upload arbitrary files. Exploiting this issue may allow an attacker to compromise the application and the underlying system; other attacks are also possible...
CVE-2006-4563
Cross-site scripting XSS vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the myhop parameter to modules.php...
CVE-2006-4563
CVE-2006-4563 details a cross-site scripting (XSS) flaw in the MyHeadlines before 4.3.2 module for PHP-Nuke. The vulnerability can be exploited remotely to inject arbitrary web script or HTML via the myh_op parameter to modules.php. Per the NVD entry, the CVSSv2 base score is 6.8 (MEDIUM) with ne...
CVE-2006-4563
Cross-site scripting XSS vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the myhop parameter to modules.php...
PHP-Nuke MyHeadlines 4.3.1 Module - Cross-Site Scripting
PHP-Nuke MyHeadlines 4.3.1 Module - Cross-Site Scripting source: https://www.securityfocus.com/bid/19825/info PHP-Nuke MyHeadlines module is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to...
[SA21653] PHP-Nuke MyHeadlines Module "myh_op" Cross-Site Scripting
TITLE: PHP-Nuke MyHeadlines Module "myhop" Cross-Site Scripting SECUNIA ADVISORY ID: SA21653 VERIFY ADVISORY: http://secunia.com/advisories/21653/ CRITICAL: Less critical IMPACT: Cross Site Scripting WHERE: From remote SOFTWARE: MyHeadlines 4.x module for PHP-Nuke http://secunia.com/product/11722...
PHP-Nuke MyHeadlines 4.3.1 Module - Cross-Site Scripting
source: https://www.securityfocus.com/bid/19825/info PHP-Nuke MyHeadlines module is prone to a cross-site scripting vulnerability because the application fails to properly sanitize user-supplied input. An attacker may leverage this issue to have arbitrary script code execute in the browser of an...