CVE-2007-1925

The CVE-2007-1925 entry affects Tru-Zone Nuke ET 3.4 before fix 7, where the borrado function in modules/Your_Account/index.php does not verify that account deletion requests originate from the account owner. This allows remote authenticated users to delete arbitrary accounts by modifying cookies...

CVE-2008-1873

CVE-2008-1873 is a cross-site scripting (XSS) vulnerability in Nuke ET’s private message feature affecting Nuke ET 3.2 and 3.4. The flaw allows remote authenticated users to inject arbitrary script/HTML via a CSS property in the STYLE attribute of a DIV element within the mensaje parameter, with ...

CVE-2005-3748

CVE-2005-3748 describes an SQL injection in the Search module of Tru-Zone Nuke ET 3.2 (and possibly earlier versions). The vulnerability allows remote attackers to manipulate the database by injecting SQL via the query parameter. The NVD entry records a CVSS v2 base score of 7.5 (HIGH) with netwo...

CVE-2005-1610

CVE-2005-1610 describes a cross-site scripting (XSS) vulnerability in Tru-Zone NukeET 3.0/3.1, exploitable via a base64-encoded Codigo parameter passed to security.php. This allows remote attackers to inject arbitrary script/HTML. The affected item is Tru-Zone NukeET 3.0 and 3.1; no root cause de...

CVE-2008-2133

CVE-2008-2133 is an XSS vulnerability in the Journal module of Tru-Zone Nuke ET 3.x. The flaw allows remote attackers to inject arbitrary web script or HTML via the title parameter in a new entry, demonstrated by a CSS property in the STYLE attribute of a DIV element. Affected component: Journal ...

CVE-2008-2134

CVE-2008-2134 affects the Journal module in Tru-Zone Nuke ET 3.x. An attacker can remotely obtain access to arbitrary user accounts and modify or delete data by supplying a modified username in an unspecified cookie. The vulnerability is documented in multiple sources (NVD entry CVE-2008-2134). T...