[Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke v7.3 and earlier

=========================================================================== =========================================================================== Advisory: 2004-Nuke-001 Affected Software: PHPNuke Affected Versions: Version 7.3 and earlier Main Developer: Francisco Burzi...

[Squid 2004-Nuke-001] Inadequate Security Checking in PHPNuke v7.3 and earlier

=========================================================================== =========================================================================== Advisory: 2004-Nuke-001 Affected Software: PHPNuke Affected Versions: Version 7.3 and earlier Main Developer: Francisco Burzi...

[waraxe-2004-SA#029 - Possible remote file inclusion in PhpNuke 6.x - 7.3]

================================================================================ waraxe-2004-SA029 ================================================================================ Possible remote file inclusion in PhpNuke 6.x - 7.3...

[waraxe-2004-SA#030 - Multiple vulnerabilities in PhpNuke 6.x - 7.3]

================================================================================ waraxe-2004-SA030 ================================================================================ Multiple vulnerabilities in PhpNuke 6.x - 7.3...

[waraxe-2004-SA#028 - Multiple vulnerabilities in NukeJokes module for PhpNuke]

================================================================================ waraxe-2004-SA028 ================================================================================ Multiple vulnerabilities in NukeJokes module for PhpNuke...

waraxe-2004-SA028.txt

================================================================================ waraxe-2004-SA028 ================================================================================ Multiple vulnerabilities in NukeJokes module for PhpNuke...

waraxe-2004-SA027.txt

================================================================================ waraxe-2004-SA027 ================================================================================ Once again - critical vulnerabilities in PhpNuke 6.x - 7.2...

Several vulnerabilities found in PHPNuke

Janek Vind "waraxe" reports that several issues in the PHPNuke software may be exploited via carefully crafted URL requests. These URLs will permit the injection of SQL code, cookie theft, and the readability of the PHPNuke administrator account...

[Full-Disclosure] [waraxe-2004-SA#027 - Once again - critical vulnerabilities in PhpNuke 6.x - 7.2]

================================================================================ waraxe-2004-SA027 ================================================================================ Once again - critical vulnerabilities in PhpNuke 6.x - 7.2...

[waraxe-2004-SA#017 - User-level authentication bypass in phpnuke 6.x-7.2]

================================================================================ waraxe-2004-SA017 ================================================================================ User-level authentication bypass in phpnuke 6.x-7.2...

[waraxe-2004-SA#008 - easy way to get superadmin rights in PhpNuke 6.x-7.1.0]

================================================================================ waraxe-2004-SA008 ================================================================================ waraxe-2004-SA008 - easy way to get superadmin rights in PhpNuke 6.x-7.1.0...

[waraxe-2004-SA#010 - Multiple vulnerabilities in Error Manager v2.1 for PhpNuke]

================================================================================ waraxe-2004-SA010 ================================================================================ Multiple vulnerabilities in Error Manager v2.1 for PhpNuke...

waraxe-2004-SA010.txt

=============================================================================== = waraxe-2004-SA010 =============================================================================== = Multiple vulnerabilities in Error Manager v2.1 for PhpNuke...

waraxe-2004-SA006.txt

================================================================================ waraxe-2004-SA006 ================================================================================ Multiple vulnerabilities in 4nalbum module for PhpNuke...

waraxe-2004-SA007.txt

================================================================================ waraxe-2004-SA007 ================================================================================ XSS and SQL injection bugs in 4nguestbook module for PhpNuke...

[waraxe-2004-SA#006 - Multiple vulnerabilities in 4nalbum module for PhpNuke]

================================================================================ waraxe-2004-SA006 ================================================================================ Multiple vulnerabilities in 4nalbum module for PhpNuke...

[waraxe-2004-SA#007 - XSS and SQL injection bugs in 4nguestbook module for PhpNuke]

================================================================================ waraxe-2004-SA007 ================================================================================ XSS and SQL injection bugs in 4nguestbook module for PhpNuke...

[SCAN Associates Sdn Bhd Security Advisory] PHPNuke 6.9 > and below SQL Injection in multiple module.

Products: PHPNuke 6.9 posibbly 7.x http://www.phpnuke.org Date: 10 February 2004 Author: pokleyzz pokleyzzatscan-associates.net Contributors: skatscan-associates.net shaharilatscan-associates.net muniratscan-associates.net URL: http://www.scan-associates.net Summary: PHPNuke 6.9 and below posibbl...

The_First_Cut_Is_The_Deepest.txt

!/usr/bin/php -q PHPnuke 6.x and 5.x fetch author hash by pokleyzz Web Links module 3rd January 2004 : 9:29 a.m Web Links module bug found by pokleyzz 3rd January 2004 Requirement: PHP 4.x with curl extension; Greet: tynon, sk ,wanvadder, sirflyguy, wxyz , tenukboncit, kerenggakurus , s0cket370 ,...

PHP-Nuke 6.x - Category SQL Injection

PHP-Nuke 6.x - Category SQL Injection source: https://www.securityfocus.com/bid/9630/info It has been reported that PHPNuke may prone to a SQL injection vulnerability, due to insufficient sanitization user-supplied input. The problem is reported to exist in the $category variable contained within...