589 matches found
CVE-2008-2012: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the eid parameter in an event action...
CVE-2008-2013
SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a display action...
CVE-2008-2012
SQL injection vulnerability in index.php in the PostSchedule 1.0 module for PostNuke allows remote attackers to execute arbitrary SQL commands via the eid parameter in an event action...
CVE-2008-2013: Improper Neutralization of Special Elements used in an SQL Command
SQL injection vulnerability in index.php in the pnFlashGames 1.5 through 2.5 module for PostNuke, when magicquotesgpc is disabled, allows remote attackers to execute arbitrary SQL commands via the id parameter in a display action...
CVE-2008-2012
CVE-2008-2012 affects the PostSchedule 1.0 module for PostNuke. A SQL injection in index.php allows remote attackers to modify the database by supplying the eid parameter in an event action. Documented impact: arbitrary SQL execution with a CVSSv2 base score of 7.5 (HIGH). No remediation details ...
CVE-2008-2013
CVE-2008-2013 affects the pnFlashGames module (PostNuke) versions 1.5–2.5. A SQL injection exists in index.php during the display action when magic_quotes_gpc is disabled, enabling an attacker to modify or retrieve database data via the id parameter. The NVD entry reports a base CVSSv2 score of 6...
postnukefg-sql.txt
Vuln: Postnuke Mod pnFlashGames Blind SQL/SQL all version Vulnerability Author: Vulnerability search Kacper kacper1964atyahoo.pl dork: inurl:"index.php?module=pnFlashGames" Author Homepage: http://devilteam.pl/ If magicquotesgpc = off -==== Vuln to old 2 version:...
PostNuke Module pnFlashGames 2.5 - SQL Injection
PostNuke Module pnFlashGames 2.5 - SQL Injection Vuln: Postnuke Mod pnFlashGames Blind SQL/SQL all version Vulnerability Author: Vulnerability search Kacper kacper1964atyahoo.pl dork: inurl:"index.php?module=pnFlashGames" Author Homepage: http://devilteam.pl/ If magicquotesgpc = off -==== Vuln to...
PostNuke Module pnFlashGames <= 2.5 SQL Injection Vulnerabilities
Exploit for unknown platform in category web applications ================================================================= PostNuke Module pnFlashGames 2 version: index.php?module=pnFlashGames&func=display&id=-1+union+select+concatpnuname,char58,pnpass,1,2,3,4,5,6,7,8+from+nukeusers+where+uid=2/...
PostNuke Module pnFlashGames 2.5 - SQL Injection
Vuln: Postnuke Mod pnFlashGames Blind SQL/SQL all version Vulnerability Author: Vulnerability search Kacper kacper1964atyahoo.pl dork: inurl:"index.php?module=pnFlashGames" Author Homepage: http://devilteam.pl/ If magicquotesgpc = off -==== Vuln to old 2 version:...
PostNuke Module pnFlashGames <= 2.5 SQL Injection Vulnerabilities
No description provided by source. Vuln: Postnuke Mod pnFlashGames Blind SQL/SQL all version Vulnerability Author: Vulnerability search Kacper kacper1964atyahoo.pl dork: inurl:"index.php?module=pnFlashGames" Author Homepage: http://devilteam.pl/ If magicquotesgpc = off -==== Vuln to old 2 version...
postnukeschedule-sql.txt
Vuln: Postnuke Mod PostSchedule SQL Vuln Author: Vuln search Kacper kacper1964atyahoo.pl google:"PostSchedule ver 1" Vuln: index.php?module=PostSchedule&view=event&eid=-1'+union+select+0,1,2,3,4,5,6,7,8,concatpnuname,char58,pnpass,10,11,12,13//from//nukeusers//where//pnuid=2/ $Severo: Moga byc...
PostNuke Module PostSchedule 1.0 - eid SQL Injection
PostNuke Module PostSchedule 1.0 - eid SQL Injection Vuln: Postnuke Mod PostSchedule SQL Vuln Author: Vuln search Kacper kacper1964atyahoo.pl google:"PostSchedule ver 1" Vuln:...
PostNuke Module PostSchedule 1.0 - 'eid' SQL Injection
Vuln: Postnuke Mod PostSchedule SQL Vuln Author: Vuln search Kacper kacper1964atyahoo.pl google:"PostSchedule ver 1" Vuln: index.php?module=PostSchedule&view=event&eid=-1'+union+select+0,1,2,3,4,5,6,7,8,concatpnuname,char58,pnpass,10,11,12,13//from//nukeusers//where//pnuid=2/ $Severo: Moga byc...
PostNuke Module PostSchedule (eid) SQL Injection Vulnerability
Exploit for unknown platform in category web applications ============================================================== PostNuke Module PostSchedule eid SQL Injection Vulnerability ============================================================== Vuln: Postnuke Mod PostSchedule SQL Vuln Author: Vul...
PostNuke Module PostSchedule (eid) SQL Injection Vulnerability
No description provided by source. Vuln: Postnuke Mod PostSchedule SQL Vuln Author: Vuln search Kacper kacper1964atyahoo.pl google:"PostSchedule ver 1" Vuln:...
Sql injection
The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magicquotesruntime is enabled, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via input associated with server variables, as demonstrated by the CLIENTIP...
CVE-2008-1591
The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magicquotesruntime is enabled, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via input associated with server variables, as demonstrated by the CLIENTIP...
CVE-2008-1591
The CVE-2008-1591 issue affects PostNuke 0.764 and earlier, where pnVarPrepForStore does not sanitize input when magic_quotes_runtime is enabled. This allows remote attackers to perform SQL injection and execute arbitrary SQL commands via server variables, demonstrated via the CLIENT_IP (HTTP_CLI...
CVE-2008-1591
The pnVarPrepForStore function in PostNuke 0.764 and earlier skips input sanitization when magicquotesruntime is enabled, which allows remote attackers to conduct SQL injection attacks and execute arbitrary SQL commands via input associated with server variables, as demonstrated by the CLIENTIP...