PostNuke PostWrap Module - Remote File Inclusion Code Execution

PostNuke PostWrap Module - Remote File Inclusion Code Execution ".,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,.." ".,--,. -.,--,." ".,--,. ALBANIA SECURITY CLAN -.,--,." ".,--,. -.,--,." ".,--,. ...::www.albanianhaxorz.org::... -.,--,." ".,--,.- -.,--,." ".,--,.- PROUD TO BE ALBANIAN...

PostNuke PostWrap Module Remote Exploit

Exploit for unknown platform in category web applications ======================================= PostNuke PostWrap Module Remote Exploit ======================================= ".,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,.." ".,--,. -.,--,." ".,--,. ALBANIA SECURITY CLAN -.,--,." ".,--...

PostNuke PostWrap Module Remote Exploit

No description provided by source. ".,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,.." ".,--,. -.,--,." ".,--,. ALBANIA SECURITY CLAN -.,--,." ".,--,. -.,--,." ".,--,. ...::www.albanianhaxorz.org::... -.,--,." ".,--,.- -.,--,." ".,--,.- PROUD TO BE ALBANIAN -.,--,." ".,--,. -.,--,." ".,--,...

PostNuke PostWrap Module - Remote File Inclusion / Code Execution

".,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,..,-'^'-,.." ".,--,. -.,--,." ".,--,. ALBANIA SECURITY CLAN -.,--,." ".,--,. -.,--,." ".,--,. ...::www.albanianhaxorz.org::... -.,--,." ".,--,.- -.,--,." ".,--,.- PROUD TO BE ALBANIAN -.,--,." ".,--,. -.,--,." ".,--,. Copyright c 2005 ASC...

CVE-2004-2752

Cross-site scripting XSS vulnerability in the Downloads module in PostNuke up to 0.726, and possibly later versions, allows remote attackers to inject arbitrary HTML and web script via the ttitle parameter in a viewdownloaddetails action...

CVE-2004-1949

SQL injection vulnerability in PostNuke 7.2.6 and earlier allows remote attackers to execute arbitrary SQL via 1 the sif parameter to index.php in the Comments module or 2 timezoneoffset parameter to changeinfo.php in the YourAccount module...

CVE-2004-2751

SQL injection vulnerability in the memberslist module in PostNuke 0.726, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the sortby parameter...

PostNuke pnTresMailer codebrowserpntm.php Traversal Arbitrary File Access

The remote host is running a version of the pnTresMailer PostNuke module which is vulnerable to a directory traversal attack. An attacker may use this flaw to read arbitrary files on the remote web server, with the privileges of the web server process. %NASLMINLEVEL 70300 C Tenable Network...

PostNuke Detection

The remote host is running PostNuke, a content manager system written in PHP. Development of Postnuke stopped in 2008. Security flaws will not be patched. C Tenable Network Security, Inc. include'compat.inc'; if description scriptid15721; scriptversion"1.15";...

PostNuke Trojaned Distribution

The remote host seems to be running a copy of a trojaned version of the 'PostNuke' content management system. PostNuke is a content management system in PHP whose main website has been compromised between the 24th and 26th of October 2004. An attacker modified some of the source code of the tool ...

Multiple Full Disclosure Path in postnuke 0.750 phoenix

CODEBUG Labs Advisory 6 Title: Multiple Full Disclosure Path in postnuke 0.750 phoenix Author: FAiN182 - [email protected] Product: Postnuke 0.750 Phoenix Type: Full disclosure path Web: http://www.mantralab.org Personal Site: http://fain182.altervista.org --- the product Postnuke is a CMS...

PostNuke News Module article.php sid Parameter XSS

The remote host is running a version of PostNuke which contains the 'News' module which itself is vulnerable to a cross-site scripting issue. An attacker may use these flaws to steal the cookies of the legitimate users of this website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

SQL-Injection in Subjects 2.0 for Postnuke

CRIOLABS - Software: Subjects 2.0 - Type: Postnuke module - Vendor: Postnuke Modules Factory. Software Software: Subjects Postnuke module Version: 2.0 Plataforms: Unix/Win/PHP/MySQL/Postnuke Web: http://home.postnuke.ru Vendor Description Module is designed for structured store & display text...

CVE-2004-1668

Multiple SQL injection vulnerabilities in index.php in Subjects 2.0 Postnuke module allow remote attackers to execute arbitrary SQL commands via the 1 pageid, 2 subid, or 3 catid parameters...

PostNuke Modules Factory Subjects Module 2.0 - SQL Injection

PostNuke Modules Factory Subjects Module 2.0 - SQL Injection source: https://www.securityfocus.com/bid/11148/info Reportedly the PostNuke Modules Factory Subjects module is affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize...

subjects2.txt

CRIOLABS - Software: Subjects 2.0 - Type: Postnuke module - Vendor: Postnuke Modules Factory. Software Software: Subjects Postnuke module Version: 2.0 Plataforms: Unix/Win/PHP/MySQL/Postnuke Web: http://home.postnuke.ru Vendor Description Module is designed for structured store & display text...

PostNuke Modules Factory Subjects Module 2.0 - SQL Injection

source: https://www.securityfocus.com/bid/11148/info Reportedly the PostNuke Modules Factory Subjects module is affected by a remote SQL injection vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied URI parameters. An attacker might exploit this iss...

PostNuke Reviews Module title Parameter XSS

The remote host is running a version of PostNuke that contains the 'Reviews' module, which itself is vulnerable to a cross-site scripting issue. An attacker may use this flaw to steal the cookies of the legitimate users of this website. %NASLMINLEVEL 70300 C Tenable Network Security, Inc...

PostNuke Install Script Admin Password Disclosure

The remote host is running the PostNuke content management system. The installation script of the remote PostNuke CMS install.php is accessible. An attacker may access it to reconfigure the remote PostNuke installation and obtain the password of the remote database and PostNuke installation...

ew_file_manager.txt

CIRT-200404: EasyWeb EW FileManager Directory Traversal Remote File Retrieval - 07/23/2004 Product: EasyWeb FileManager Module Description: EasyWeb FileManager Module for PostNuke is vulnerable to a directory traversal problem which allows retrieval of arbitrary files from the remote system...