SQL Injection vulnerabilities in myPHPNuke

Здравствуйте 3APA3A! Сообщаю вам о найденных мною SQL Injection уязвимостях в системе myPHPNuke. SQL Injection: Уязвимости в скрипте sections.php в параметрах artid и secid...

CVE-2007-2084

CVE-2007-2084 affects MobilePublisherphp version 1.1.2 and is described as a PHP remote file inclusion vulnerability in the admin directory. The issue permits an attacker to supply a URL in the auth_method parameter to any of the admin PHP files (index.php, list.php, postreview.php, reindex.php, ...