CVE-2010-5040

The CVE-2010-5040 entry describes a PHP remote file inclusion in the NP_Gallery plugin (NP_gallery.php) for Nucleus CMS, version 0.94. The vulnerability arises from the DIR_NUCLEUS parameter allowing an attacker to supply a URL and execute arbitrary PHP code on the affected system. The available ...

CVE-2010-5041

CVE-2010-5041 describes an SQL injection in the NP_Gallery plugin 0.94 for Nucleus, exploitable via the id parameter in a plugin action on index.php. This is a remote code execution risk on vulnerable installations, enabling arbitrary SQL commands. The available documents do not provide explicit ...