nuked-klan nuked-klan 1.7 vulnerabilities and exploits

(subscribe to this query)

SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and previous versions allows remote malicious users to execute arbitrary SQL commands via the m parameter to index.php.

Nuked-klan Nuked-klan 1.3 Nuked-klan Nuked-klan 1.3 Beta Nuked-klan Nuked-klan 1.2 Nuked-klan Nuked-klan 1.2 Beta Nuked-klan Nuked-klan Nuked-klan Nuked-klan 1.4 Nuked-klan Nuked-klan 1.5 Nuked-klan Nuked-klan 1.5 Sp2 Nuked-klan Nuked-klan 1.7

1 EDB exploit

Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and previous versions allows remote malicious users to inject arbitrary web script or HTML via a javascript: URI in a getURL statement in a .swf file, as demonstrated by "Remote Cookie Disclosure." NOTE: it coul...

Nuked-klan Nuked-klan 1.5 Sp2 Nuked-klan Nuked-klan 1.7 Nuked-klan Nuked-klan 1.3 Nuked-klan Nuked-klan 1.3 Beta Nuked-klan Nuked-klan 1.2 Nuked-klan Nuked-klan 1.2 Beta Nuked-klan Nuked-klan 1.4 Nuked-klan Nuked-klan 1.5

Cross-site scripting (XSS) vulnerability in index.php in Nuked-klaN 1.7 allows remote malicious users to inject arbitrary web script or HTML via the letter parameter.

Nuked-klan Nuked-klan 1.7

Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote malicious users to execute arbitrary SQL commands via the (1) forum_id or (2) thread_id parameter in the Forum file, (3) the link_id in the Links file, (4) the artid parameter in the Sections file, and (5) the ...

Nuked-klan Nuked-klan 1.7

4 EDB exploits

Cross-site scripting (XSS) vulnerability in Nuked-Klan 1.7 allows remote malicious users to inject arbitrary web script or HTML via the (1) Search module, (2) certain edit fields in Guestbook, (3) the title in the Forum module, and (4) Textbox.

Nuked-klan Nuked-klan 1.7

Cross-site request forgery (CSRF) vulnerability in the del_block function in modules/Admin/block.php in Nuked-Klan 1.7.5 and previous versions and 1.7 SP4.2 allows remote malicious users to delete arbitrary "blocks" via a link with a modified bid parameter in a del_bloc...

Nuked-klan Nuked-klan Nuked-klan Nuked-klan 1.7 Sp4.2

Incomplete blacklist vulnerability in the nk_CSS function in nuked.php in Nuked-Klan 1.7 SP4.3 allows remote malicious users to bypass anti-XSS features and inject arbitrary web script or HTML via JavaScript in an attribute value that is not in the blacklist, as demonstrated usin...

Nuked-klan Nuked-klan 1.7 Sp4.3

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook