256 matches found
EUVD-2006-1603
Malware in sbrugna...
EUVD-2007-5073
Malware in sbrugna...
EUVD-2007-4588
Malware in sbrugna...
EUVD-2007-3322
Malware in sbrugna...
PHPNuke (Mod_weblink) - SQL Injection Vulnerability
Document Title: =============== PHPNuke Modweblink - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1775 Release Date: ============= 2016-03-02 Vulnerability Laboratory ID VL-ID: ==================================== 1775 Comm...
PHPNuke (Mod_weblink) - SQL Injection Vulnerability
Document Title: =============== PHPNuke Modweblink - SQL Injection Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1775 Release Date: ============= 2016-03-02 Vulnerability Laboratory ID VL-ID: ==================================== 1775 Comm...
PHPNuke friendphp Module Remote SQL Injection
An SQL injection vulnerability has been reported in PHPNuke Friend.php Module. Successful exploitation of this vulnerability would allow a remote attacker to execute arbitrary SQL commands on the affected system...
PHPNuke 5.6/6.0 Search Engine SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/6887/info It has been reported that the search module distributed with PHPNuke is vulnerable to an SQL injection attack. PHPNuke, in some cases, does not sufficiently sanitize user-supplied input which is used when...
PHPNuke 4.x/5.x Remote Arbitrary File Include Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3889/info PHPNuke is a website creation/maintenance tool. The 'index.php' script has a feature which allows users to include files. Due to insufficent input validation, it is possible to include files located on a remote...
PHPNuke AddOn PHPToNuke.PHP 1.0 Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/3807/info phptonuke.php is a PHPNuke AddOn script to insert a PHP script into the middle of a PHPNuke site. It is written and maintained by Lebios. It is possible for a malicious user to create a link to the phptonuke.php...
PHPNuke 6.0/6.5 Search Form Cross-Site Scripting Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/5788/info PHPNuke 6.0 is prone to cross-site scripting attacks. HTML tags are not filtered from links to the 'modules.php' script. Reportedly, the problem lies in the 'Search' page of the 'modules.php' script. It is...
PHPNuke Modules.PHP Search Module Remote Directory Traversal Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/15137/info PHPNuke Search Module is prone to a directory traversal vulnerability. This is due to a lack of proper sanitization of user-supplied input. A remote attacker may view files that are only intended to be accessib...
Coppermine Photo Gallery <= 1.2.2b (Nuke Addon) Include Vulnerability
No description provided by source. ----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Coppermine Photo Gallery v1.2.2b for PHPNUKE THEMEDIR Remote File...
PHPNuke 5.6/6.x Banners.PHP Banner Manager Password Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7170/info It has been reported that an input validation error exists in the banners.php file included with PHPNuke. Because of this, an attacker could send a malicious string through PHPNuke that would allow the attacker ...
WarpSpeed 4nAlbum Module 0.92 nmimage.php z Parameter XSS
No description provided by source. source: http://www.securityfocus.com/bid/9881/info It has been reported that 4nAlbum is prone to multiple vulnerabilities. These issues are primarily due to a failure of the module to validate user input. There is an information disclosure issue with the...
PHP-Nuke 7.8 - SQL Injection / Remote Command Execution Exploit
No description provided by source. ?php 20.05 23/10/2005 ---phpnuke78xpl.php PHPNuke 7.8 with all security fixes/patches Downloads,WebLinks & YourAccount modules SQL Injection / remote commands execution exploit yet not tested 7.9, but OK... by rgod site: http://rgod.altervista.org make these...
PHPNuke 7.x CAPTCHA Bypass Weakness
No description provided by source. source: http://www.securityfocus.com/bid/16722/info The CAPTCHA implementation of PHPNuke may be bypassed by remote attackers due to a design error. This may be used to carry out other attacks such as brute-force attempts against the login page. ------ real life...
PHPNuke 7.7 EV Search Module SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/16186/info PHPNuke EV is prone to an SQL-injection vulnerability because the application fails to properly sanitize user-supplied input before using it in an SQL query. A successful exploit could allow an attacker to...
PHPNuke Splatt Forum 3.2 Module Path Disclosure Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7080/info The Splatt Forum module for PHPNuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker. An attacker could use the information gathered ...
PHPNuke 5.6/6.x News Module Index.PHP SQL Injection Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/7173/info It has been reported that an input validation error exists in the index.php file included with PHPNuke as part of the News module. Because of this, an attacker could send a malicious string through PHPNuke that...