phpnukeklein-sql.txt

Rbt-4 crew http://www.rbt-4.net Author : Lovebug ---------------------------- Remote Sql injection Php-Nuke module name Kleinanzeigen modules.php?name=Kleinanzeigen&aop=visit&lid=sql Exploit username :...

PHP-Nuke Book Catalog模块 SQL注入漏洞

BUGTRAQ ID: 30511 CNCAN ID：CNCAN-2008080427 PHP-Nuke Book Catalog是一款基于PHP的WEB应用程序。 PHP-Nuke Book Catalog不正确处理用户提交的输入，远程攻击者可以利用漏洞进行SQL注入攻击，可能获得敏感信息或操作数据库。 问题由于脚本对用户提交给'catid'参数缺少过滤，构建恶意SQL查询作为参数数据，可更改原来的SQL逻辑，获得敏感信息或操作数据库。 Basis Consultant Book Catalog 1.0 目前没有解决方案提供：...

PHP-Nuke Book Catalog Module 1.0 - 'catid' SQL Injection

source: https://www.securityfocus.com/bid/30511/info The Book Catalog module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHP-Nuke Book Catalog Module 1.0 - catid SQL Injection

PHP-Nuke Book Catalog Module 1.0 - catid SQL Injection source: https://www.securityfocus.com/bid/30511/info The Book Catalog module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this...

Sql injection

SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showdvd action...

CVE-2008-3151

SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showdvd action...

CVE-2008-3151

CVE-2008-3151 describes an SQL injection in the PHP-Nuke 4ndvddb 0.91 module. The vulnerability is triggered via the id parameter in the show_dvd action, allowing remote attackers to• execute arbitrary SQL commands• potentially access or modify data in the affected database. The available connect...

CVE-2008-3151

SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showdvd action...

phpnuke4ndvddb-sql.txt

Module's Name: 4ndvddb Module's Version: 0.91 +---------------------------------------+ | SQL Injection Vulnerability PHP-NUKE | Module's Name: 4ndvddb | Module's Version: 0.91 | | found by lovebug | | RBT-4 | www.rbt-4.net +---------------------------------------+ vuln:...

phpnukeplatinum-exec.txt

Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...

PHP-NUKE SQL Module's Name 4ndvddb

Module's Name: 4ndvddb Module's Version: 0.91 +---------------------------------------+ | SQL Injection Vulnerability PHP-NUKE | Module's Name: 4ndvddb | Module's Version: 0.91 | | found by lovebug | | RBT-4 | www.rbt-4.net +---------------------------------------+ vuln:...

Insufficient Anti-automation vulnerability in RavenNuke

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в RavenNuke порте PHP-Nuke. Insufficient Anti-Automation: Уязвимость в капче системы. Эксплоит: http://websecurity.com.ua/uploads/2008/RavenNuke20CAPTCHA20bypass.html Уязвима версия RavenNuke 2.20.01 и...

PHP-Nuke 4ndvddb 0.91 Module - id SQL Injection

PHP-Nuke 4ndvddb 0.91 Module - id SQL Injection source: https://www.securityfocus.com/bid/30120/info The '4ndvddb' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue cou...

PHP-Nuke 4ndvddb 0.91 Module - 'id' SQL Injection

source: https://www.securityfocus.com/bid/30120/info The '4ndvddb' module for PHP-Nuke is prone to an SQL-injection vulnerability because it fails to sufficiently sanitize user-supplied data before using it in an SQL query. Exploiting this issue could allow an attacker to compromise the...

PHP Nuke Platinium <= 7.6.b.5 Remote Code Execution Exploit

PHP Nuke Platinium = 7.6.b.5 Remote Code Execution Exploit Author: Charles "real" F. charlesfolathotmail.fr Date: 02/07/08 http://realn.free.fr/releases/57150 Thanks, Charles "real" F...

Daily web applications security vulnerabilities summary (PHP, ASP, JSP, CGI, Perl)

PHP inclusions, SQL injections, directory traversals, crossite scripting, information leaks, etc. PHP-Nuke 8.1.1 Discontrol - automation protection bypass...

PHP-Nuke Platinium <= 7.6.b.5 Remote Code Execution Exploit

Exploit for unknown platform in category web applications =========================================================== PHP-Nuke Platinium ", with = sql, php or cmd If you want to understand how it work ... read the code. You can take look to unchunk function, because I think you were many with thi...

PHP-Nuke Platinium 7.6.b.5 - Remote Code Execution

Date: 02/07/08 Note I modified a bit phpsploit for this exploit, because PHP Nuke plays with REQUESTURI var ... Requirements registerglobals=On phpreter phpreter is really easy to use: You can change mode using "mode=", with = sql, php or cmd If you want to understand how it work ... read the cod...

Insufficient Anti-automation vulnerability in PHP-Nuke Discontrol

Здравствуйте 3APA3A! Сообщаю вам о найденной мною Insufficient Anti-automation уязвимости в PHP-Nuke Discontrol порте PHP-Nuke. Insufficient Anti-Automation: Уязвимость в капче системы. Эксплоит: http://websecurity.com.ua/uploads/2008/PHP-Nuke20Discontrol20CAPTCHA20bypass.html Уязвима версия...

Cross-Site Scripting vulnerabilities in PHP-Nuke

Здравствуйте 3APA3A! Сообщаю вам о найденных мною Cross-Site Scripting уязвимостях в PHP-Nuke. XSS: POST запрос на странице http://site/modules.php?name=YourAccount&op=newuser "script src=http://site/script.js В полях: gfxcheck и randomnum. Эксплоит:...