CVE-2009-0678

CVE-2009-0678 affects RavenNuke 2.30. The vulnerability in images/captcha.php arises from an aFonts array parameter value that does not map to a valid font file, causing an error message that reveals the installation path. The NVD entry lists a base CVSSv2 score of 5.0 (Medium) with network attac...

CVE-2009-0674

CVE-2009-0674 affects RavenNuke 2.30 (Raven Web Services). The vulnerability arises when register_globals and display_errors are enabled, allowing remote attackers to probe local file existence by sending requests with full paths in the aFonts array parameter and observing differing error message...

CVE-2009-0677

The CVE-2009-0677 issue affects RavenNuke 2.30 (Your Account module, avatarlist.php, reachable via modules.php). It allows remote authenticated users to execute arbitrary code through PHP sequences in an element of the replacements array, which is processed by preg_replace with the eval switch as...

CVE-2009-0679

Technical details (affected software, component, vectors, and impact) are not publicly available in the provided documents. Monitor for updates as new information may emerge.

CVE-2009-0672

The CVE shows a SQL injection in the RavenNuke 2.30 Resend_Email module, exploitable via the user_prefix parameter to modules.php. Affected component: Raven Web Services (Resend_Email). Root cause: improper handling of user_prefix leads to arbitrary SQL commands when accessed by remote authentica...

CVE-2009-0673

CVE-2009-0673 describes an eval injection in RavenNuke 2.30’s Custom Fields within the Your Account module. The vulnerability allows remote authenticated administrators to execute arbitrary PHP code via the ID Field Name box in a yaCustomFields action to admin.php. Affected product/stack: Raven W...