Lucene search
+L
Catalog
Vendors
Products
Timeline
Vulnerabilities
Sources
Documentation
Blog
Glossary
FAQ
Brand assets
Assessment
Agents dashboard
Agent Scanning
API Scanning
Assessment API
Alerts
Email notifications
Webhook notifications
Alerts API
SBOM package analysis
API Reference
Settings
Sign in
🔥 Daily Hot!
💪🏽 CPE Enhanced Advisories
🕶 Shadow Exploits
🕵🏼 Vulners CPE
🔐 Security news
💻 Exploit updates
📑 Blogs review
🐧 Linux vulnerabilities
🐞 Bugbounty
🤖 AI High Score
📰 CVE Feed
show all

251 matches found

Packet Storm
Packet Storm•added 2007/09/21 12:0 a.m.•26 views

phpnuke-admin.txt

Paste this code into an HTML page then link it to victim victim must be admin document.Faiuto.submit You are admin now ; Then you can log in into phpnuke with user HACKER and pass YOURPASSWORD...

7.4AI score
SaveExploits0
NVD
NVD•added 2007/08/31 12:17 a.m.•18 views

CVE-2007-4606

PHP remote file inclusion vulnerability in convert/mvcwconver.php in the Virtual War VWar module for PHPNuke-Clan PNC 4.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwarroot parameter, a different vector than CVE-2006-1602. NOTE: it is possible that this...

7.5CVSS7.4AI score0.0213EPSS
SaveExploits1References2
Prion
Prion•added 2007/08/31 12:17 a.m.•22 views

Remote file inclusion

PHP remote file inclusion vulnerability in convert/mvcwconver.php in the Virtual War VWar module for PHPNuke-Clan PNC 4.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwarroot parameter, a different vector than CVE-2006-1602. NOTE: it is possible that this...

7.5CVSS7.7AI score0.0213EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist•added 2007/08/31 12:0 a.m.•29 views

CVE-2007-4606

PHP remote file inclusion vulnerability in convert/mvcwconver.php in the Virtual War VWar module for PHPNuke-Clan PNC 4.2.0 and earlier allows remote attackers to execute arbitrary PHP code via a URL in the vwarroot parameter, a different vector than CVE-2006-1602. NOTE: it is possible that this...

7.4AI score0.0213EPSS
SaveExploits1References2
CVE
CVE•added 2007/08/31 12:0 a.m.•162 views

CVE-2007-4606

CVE-2007-4606 describes a PHP remote file inclusion in the Virtual War (VWar) module of PHPNuke-Clan (PNC) 4.2.0 and earlier. The vulnerability arises in convert/mvcw_conver.php where an attacker can cause arbitrary PHP code execution by supplying a crafted URL in the vwar_root parameter. The iss...

7.5CVSS7.5AI score0.0213EPSS
SaveExploits1References2Affected Software1
Packet Storm
Packet Storm•added 2007/08/29 12:0 a.m.•96 views

phpnukeclan-rfi.txt

'/ -.- --------------------------oOO------OOo------------------------- | PHPNuke-Clan = v4.2.0 mvcwconver.php Remote File Inclusion | | coded by DNX | ------------------------------------------------------------------ ! Discovered: DNX ! Vendor: http://www.phpnuke-clan.net ! Detected: 11.08.2007 ...

7.4AI score
SaveExploits0
seebug.org
seebug.org•added 2007/08/29 12:0 a.m.•95 views

PHPNuke-Clan <= 4.2.0 (mvcw_conver.php) RFI Vulnerability

No description provided by source. '/ -.- --------------------------oOO------OOo------------------------- | PHPNuke-Clan = v4.2.0 mvcwconver.php Remote File Inclusion | | coded by DNX | ------------------------------------------------------------------ ! Discovered: DNX ! Vendor:...

7.1AI score
SaveExploits0
zdt
zdt•added 2007/08/28 12:0 a.m.•204 views

PHPNuke-Clan <= 4.2.0 (mvcw_conver.php) RFI Vulnerability

Exploit for unknown platform in category web applications ========================================================= PHPNuke-Clan = 4.2.0 mvcwconver.php RFI Vulnerability ========================================================= '/ -.- --------------------------oOO------OOo------------------------...

7.1AI score
SaveExploits0
Exploit DB
Exploit DB•added 2007/08/28 12:0 a.m.•108 views

PHPNuke-Clan 4.2.0 - 'mvcw_conver.php' Remote File Inclusion

'/ -.- --------------------------oOO------OOo------------------------- | PHPNuke-Clan = v4.2.0 mvcwconver.php Remote File Inclusion | | coded by DNX | ------------------------------------------------------------------ ! Discovered: DNX ! Vendor: http://www.phpnuke-clan.net ! Detected: 11.08.2007 ...

7.5CVSS5.8AI score0.0213EPSS
SaveExploits1
exploitpack
exploitpack•added 2007/08/28 12:0 a.m.•238 views

PHPNuke-Clan 4.2.0 - mvcw_conver.php Remote File Inclusion

PHPNuke-Clan 4.2.0 - mvcwconver.php Remote File Inclusion '/ -.- --------------------------oOO------OOo------------------------- | PHPNuke-Clan = v4.2.0 mvcwconver.php Remote File Inclusion | | coded by DNX | ------------------------------------------------------------------ ! Discovered: DNX !...

7.5AI score
SaveExploits0
NVD
NVD•added 2007/06/21 7:30 p.m.•24 views

CVE-2007-3332

Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary files via a .. dot dot sequence in the name parameter in a modload action...

5CVSS6.7AI score0.02744EPSS
SaveExploits2References5
Prion
Prion•added 2007/06/21 7:30 p.m.•18 views

Directory traversal

Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary files via a .. dot dot sequence in the name parameter in a modload action...

5CVSS7.2AI score0.02744EPSS
SaveExploits2References5
CVE
CVE•added 2007/06/21 7:0 p.m.•52 views

CVE-2007-3332

The CVE-2007-3332 entry concerns a directory traversal in Satellite.php of Satel Lite for PhpNuke, allowing remote attackers to read arbitrary files via a .. sequence in the name parameter used by a modload action. Affected component: Satellite.php in Satel Lite for PhpNuke. Root cause: improper ...

5CVSS6.7AI score0.02744EPSS
SaveExploits2References5Affected Software1
Cvelist
Cvelist•added 2007/06/21 7:0 p.m.•28 views

CVE-2007-3332

Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary files via a .. dot dot sequence in the name parameter in a modload action...

6.7AI score0.02744EPSS
SaveExploits2References5
Packet Storm
Packet Storm•added 2007/04/17 12:0 a.m.•39 views

waraxe-2007-SA-048.txt

waraxe-2007-SA048 - Multiple vulnerabilities in Virtual War 1.5 module for PhpNuke Author: Janek Vind "waraxe" Date: 13. April 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-48.html Target software description: VWar module for PhpNuke http://www.vwar.de/ VWar is a webbased...

7.4AI score
SaveExploits0
securityvulns
securityvulns•added 2007/04/13 12:0 a.m.•77 views

[waraxe-2007-SA#048] - Multiple vulnerabilities in Virtual War 1.5 module for PhpNuke

waraxe-2007-SA048 - Multiple vulnerabilities in Virtual War 1.5 module for PhpNuke Author: Janek Vind "waraxe" Date: 13. April 2007 Location: Estonia, Tartu Web: http://www.waraxe.us/advisory-48.html Target software description: VWar module for PhpNuke http://www.vwar.de/ VWar is a webbased...

7.1AI score
SaveExploits0
securityvulns
securityvulns•added 2007/03/27 12:0 a.m.•69 views

Satel Lite for PhpNuke &#40;Satellite.php&#41; &lt;= Local File Inclusion

+-------------------------------------------------------------------- + + Satel Lite for PhpNuke Satellite.php = Local File Inclusion + +-------------------------------------------------------------------- + + Affected Software .: NUke Satel lite + Class .............: LoCal File Inclusion + Risk...

0.1AI score
SaveExploits0
seebug.org
seebug.org•added 2007/03/19 12:0 a.m.•96 views

iFrame for Phpnuke (iframe.php) Remote File Inclusion Vulnerability

No description provided by source. iFRAME for PhpNuke iframe.php Remote File Include Vulnerabilities script :http://www.desarrollonuke.org http://up.9q9q.net/up/index.php?f=uTRRQnIjG file : iframe.php Dork : "/nuke/iframe.php" Found by & Contact : Cold z3ro , [email protected] ,...

7.1AI score
SaveExploits0
zdt
zdt•added 2007/03/18 12:0 a.m.•262 views

iFrame for Phpnuke (iframe.php) Remote File Inclusion Vulnerability

Exploit for unknown platform in category web applications =================================================================== iFrame for Phpnuke iframe.php Remote File Inclusion Vulnerability =================================================================== iFRAME for PhpNuke iframe.php Remote...

7.1AI score
SaveExploits0
seebug.org
seebug.org•added 2006/12/10 12:0 a.m.•22 views

PHPNuke多个SQL注入及跨站脚本漏洞

1"body onload="alertdocument.cookie;当浏览器时，可导致敏感信息泄露。2、SQL注入漏洞"/modules/Search/index.php"中，由于对"instory"字段缺少充分过滤，提交恶意SQL命令，可更改原有SQL逻辑，导致修改数据库或获得敏感信息。 Francisco Burzi PHP-Nuke 7.3 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：http://www.phpnuke.org Janek Vind （[email protected]）提供了如下测试方法：...

7.1AI score
SaveExploits0
Rows per page
Query Builder