S-CMS <= 2.0b3 Multiple Local File Inclusion Vulnerabilities

Exploit for unknown platform in category web applications ============================================================ S-CMS WEB: http://www.matteoiammarrone.com/public/s-cms/ | |--DOWNLOAD: http://www.matteoiammarrone.com/public/s-cms/ | |--DEMO: N/A | |--CATEGORY: CMS / Portal | |--DESCRIPTION:...

S-CMS 2.0b3 - Multiple Local File Inclusions

|| || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------------------- | MULTIPLE LOC...

S-CMS 2.0b3 - &#039;Username&#039; Blind SQL Injection

!/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH! ---------------------------------------------------------------------------------...

S-CMS 2.0b3 - Username Blind SQL Injection

S-CMS 2.0b3 - Username Blind SQL Injection !/usr/bin/perl || || || -----------------------------------------\ == -- ----------- ---------------------------- ------------------/ ¡VIVA SPAIN!...¡GANAREMOS EL MUNDIAL!...o.O ¡PROUD TO BE SPANISH!...

FreeBSD : Several vulnerabilities found in PHPNuke (33ab4a47-bfc1-11d8-b00e-000347a4fa7d)

Janek Vind 'waraxe' reports that several issues in the PHPNuke software may be exploited via carefully crafted URL requests. These URLs will permit the injection of SQL code, cookie theft, and the readability of the PHPNuke administrator account. %NASLMINLEVEL 70300 C Tenable Network Security, In...

FreeBSD : SQL injection vulnerability in phpnuke (75770425-67a2-11d8-80e3-0020ed76ef5a)

Multiple researchers have discovered multiple SQL injection vulnerabilities in some versions of Php-Nuke. These vulnerabilities may lead to information disclosure, compromise of the Php-Nuke site, or compromise of the back-end database. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...

phpnukesarkilar-sql.txt

. . | / | | \ \ | / / |\ \ \ |/ // / /\ \ / |/ \ / // | / | | / \ /|\ / / / / \ / \ / / / \ | | /\ /\ / \ | \ // est.2007 / / forum.darkc0de.com --d3hydr8 -rsauron-baltazar -sinner01 -Jappan - beenu -Marezzi-P47tr1ck- FeDeReR -MAGE -JeTFyrE- DON-Outlawz and all darkc0de and...

FreeBSD Ports: phpnuke

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

FreeBSD Ports: phpnuke

The remote host is missing an update to the system as announced in the referenced advisory. VID 33ab4a47-bfc1-11d8-b00e-000347a4fa7d OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: phpnuke

The remote host is missing an update to the system as announced in the referenced advisory. VID 75770425-67a2-11d8-80e3-0020ed76ef5a OpenVAS Vulnerability Test $ Description: Auto generated from vuxml or freebsd advisories Authors: Thomas Reinke Copyright: Copyright c 2008 E-Soft Inc...

FreeBSD Ports: phpnuke

The remote host is missing an update to the system as announced in the referenced advisory. SPDX-FileCopyrightText: 2008 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

PhpNuke &#40;add-on&#41; MS TopSites Edit Exploit And Html Injection

!-- - Author : 0x90 - - Homepage: WwW.0x90.CoM.Ar - - Contact : Gunsat0x90dotcomdotar - - Product : Php Nuke add-on MS TopSites - - Website : http://phpnuke.org/ - - Download: http://www.weblord.it/downloads/nuke65/addons/MSTopSitesITA.zip - - Problem : Edit Exploit And Html Injection - - Summary...

PHP-Nuke Platinum 7.6.b.5 Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications ============================================================= PHP-Nuke Platinum 7.6.b.5 Remote File Inclusion Vulnerability ============================================================= ----------------------------------------------...

[waraxe-2007-SA#058] - Critical Sql Injection in NukeSentinel 2.5.12

waraxe-2007-SA058 - Critical Sql Injection in NukeSentinel 2.5.12 ==================================================================== Author: Janek Vind "waraxe" Date: 27. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-58.html Target software description: Developer:...

[waraxe-2007-SA#056] - Another Sql Injection in NukeSentinel 2.5.11

waraxe-2007-SA056 - Another Sql Injection in NukeSentinel 2.5.11 ==================================================================== Author: Janek Vind "waraxe" Date: 27. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-56.html Target software description: Developer:...

Directory traversal

Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in an ACCEPTFILE array parameter to modules.php...

CVE-2007-5092

Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in an ACCEPTFILE array parameter to modules.php...

CVE-2007-5092

Summary: CVE-2007-5092 is a directory traversal vulnerability in the Dance Music module’s index.php for phpNuke, exploited when register_globals is enabled. The flaw allows remote attackers to include and execute arbitrary local files by injecting a .. path via an ACCEPT_FILE array parameter to m...

CVE-2007-5092

Directory traversal vulnerability in index.php in the Dance Music module for phpNuke, when registerglobals is enabled, allows remote attackers to include and execute arbitrary local files via a .. dot dot in an ACCEPTFILE array parameter to modules.php...

[waraxe-2007-SA#053] - Critical Sql Injection in NukeSentinel 2.5.11

waraxe-2007-SA053 - Critical Sql Injection in NukeSentinel 2.5.11 ==================================================================== Author: Janek Vind "waraxe" Date: 25. September 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-53.html Target software description:...