[SOJOBO-ADV-13-04] - PHP-Nuke 8.2.4 multiple vulnerabilities

SOJOBO-ADV-13-04 - PHP-Nuke 8.2.4 multiple vulnerabilities I. Information ================== Name : PHP-Nuke 8.2.4 multiple vulnerabilities Software : PHP-Nuke 8.2.4 and possibly below. Vendor Homepage : http://www.phpnuke.org/ Vulnerability Type : File Inclusion and Reflected Cross-Site Scriptin...

PHP-Nuke 8.2.4 - Multiple Vulnerabilities

SOJOBO-ADV-13-04 - PHP-Nuke 8.2.4 multiple vulnerabilities I. Information ================== Name : PHP-Nuke 8.2.4 multiple vulnerabilities Software : PHP-Nuke 8.2.4 and possibly below. Vendor Homepage : http://www.phpnuke.org/ Vulnerability Type : File Inclusion and Reflected Cross-Site Scriptin...

PHP-Nuke 8.2.4 - Multiple Vulnerabilities

PHP-Nuke 8.2.4 - Multiple Vulnerabilities SOJOBO-ADV-13-04 - PHP-Nuke 8.2.4 multiple vulnerabilities I. Information ================== Name : PHP-Nuke 8.2.4 multiple vulnerabilities Software : PHP-Nuke 8.2.4 and possibly below. Vendor Homepage : http://www.phpnuke.org/ Vulnerability Type : File...

PHP-Nuke 8.2.4 Cross Site Scripting / File Inclusion Vulnerabilities

PHP-Nuke version 8.2.4 suffers from cross site scripting and local file inclusion vulnerabilities. PHP-Nuke 8.2.4 multiple vulnerabilities I. Information ================== Name : PHP-Nuke 8.2.4 multiple vulnerabilities Software : PHP-Nuke 8.2.4 and possibly below. Vendor Homepage :...

PHP-Nuke 8.2.4 Cross Site Scripting / File Inclusion

SOJOBO-ADV-13-04 - PHP-Nuke 8.2.4 multiple vulnerabilities I. Information ================== Name : PHP-Nuke 8.2.4 multiple vulnerabilities Software : PHP-Nuke 8.2.4 and possibly below. Vendor Homepage : http://www.phpnuke.org/ Vulnerability Type : File Inclusion and Reflected Cross-Site Scriptin...

PHP-Nuke module (League 2.4) XSS Vulnerability

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

PHP-Nuke Module Nukequiz <= 2.0.0 SQL Injection Vulnerability

Exploit for php platform in category web applications This is private exploit. You can buy it at https://0day.today...

PHP-Nuke 8.2.4 - Cross-Site Request Forgery

Exploit Title:CSRF vulnerability Author: sajith version: PHP Nuke 8.2.4 vulnerable app link:http://phpnuke.org/modules.php?name=Release CSRF add group CSRF POC PHP nuke 8.2.4 document.getElementById'formid'.submit;...

PHP-Nuke 8.2.4 - Cross-Site Request Forgery

PHP-Nuke 8.2.4 - Cross-Site Request Forgery Exploit Title:CSRF vulnerability Author: sajith version: PHP Nuke 8.2.4 vulnerable app link:http://phpnuke.org/modules.php?name=Release CSRF add group CSRF POC PHP nuke 8.2.4 document.getElementById'formid'.submit;...

PHP-Nuke 8.2 'sid'参数SQL注入漏洞

Bugtraq ID:56700 PHP-Nuke是一款基于PHP的内容管理系统。 PHP-Nuke modules.php脚本不正确过滤"sid"参数，允许攻击者利用漏洞进行SQL注入攻击，可获得数据库信息或控制应用系统。 0 PHP-Nuke 8.2 厂商解决方案 目前没有详细解决方案提供： http://www.phpnuke.org/ http://www.example.com/modules.php?name=Newsfile=articlesid=13SQL...

PHP-Nuke 8.2 SQL Injection

Exploit Title : Nuke 8.2 Modules Bilnd SQL Injection Vulnerability Author : Ashiyane Digital Security Team Designed By : Remove Home : http://ashiyane.org/ Software Link : http://phpnuke.org/ Security Risk : High - Bilnd SQL Injection Version : All Version Dork :...

PHP-Nuke module(SPChat) SQL Injection Vulnerability

No description provided by source. Owner : Pr0T3cT10n Script site : http://www.phpnuke.org Script name : PHP-Nuke moduleSPChat Version : All Type : SQL Injection D0rk : inurl:name=SPChat Description : Pull out user details from the database Vuln :...

PHP-Nuke SPChat SQL Injection

Owner : Pr0T3cT10n Script site : http://www.phpnuke.org Script name : PHP-Nuke moduleSPChat Version : All Type : SQL Injection D0rk : inurl:name=SPChat Description : Pull out user details from the database Vuln : http://www.example.com/modules.php?op=modload&name=SPChat&file=chooser&youruid=SQL...

PHP-Nuke module (SPChat) - SQL Injection

Owner : Pr0T3cT10n Script site : http://www.phpnuke.org Script name : PHP-Nuke moduleSPChat Version : All Type : SQL Injection D0rk : inurl:name=SPChat Description : Pull out user details from the database Vuln : http://www.example.com/modules.php?op=modload&name=SPChat&file=chooser&youruid=SQL...

PHP-Nuke module (SPChat) - SQL Injection

PHP-Nuke module SPChat - SQL Injection Owner : Pr0T3cT10n Script site : http://www.phpnuke.org Script name : PHP-Nuke moduleSPChat Version : All Type : SQL Injection D0rk : inurl:name=SPChat Description : Pull out user details from the database Vuln :...

PHP-Nuke module(SPChat) SQL Injection Vulnerability

Exploit for php platform in category web applications Owner : Pr0T3cT10n Script site : http://www.phpnuke.org Script name : PHP-Nuke moduleSPChat Version : All Type : SQL Injection D0rk : inurl:name=SPChat Description : Pull out user details from the database Vuln :...

PHP NUKE ALL VERSION MULTI VULNERABILITY

Exploit Title : PHP NUKE ALL VERSION MULTI VULNERABILITY Author : Iranian Security & Research Team Discovered By : Nafsh Home : sec-lab.ir Contact : research at sec-lab dot ir Date : 23/1/2012 - 19:30 Software Link : www.phpnuke.ir Security Risk : High...

PHP-Nuke Name Download SQL Injection

.-" "-. / \ | | |, .-. .-. ,| | o/ \o | |/ /\ | @ ^^ \|IIIIII|/ @8@8 / \ / @ +-+-+-+-+-+-+-+-+-+-+ --+CrAzY CrAcKeR+-- +-+-+-+-+-+-+-+-+-+-+ Example:- - www.???.com/modules.php?name=Downloads&dop=viewdownloadeditorial&lid=sql - Injection code...

CVE-2010-5083

SQL injection vulnerability in the WebLinks module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php...

Sql injection

SQL injection vulnerability in the WebLinks module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php...