francisco burzi php-nuke 8.0 final vulnerabilities and exploits

(subscribe to this query)

Multiple cross-site scripting vulnerabilities in index.php in the Search module for Php-Nuke allows remote malicious users to inject arbitrary web script or HTML via the (1) sid, (2) max, (3) sel1, (4) sel2, (5) sel3, (6) sel4, (7) sel5, (8) match, (9) mod1, (10) mod2, or (11) mo...

Francisco Burzi Php-nuke 8.0 Final

Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote malicious users to execute arbitrary SQL via the (1) min or (2) categ parameters.

Francisco Burzi Php-nuke 8.0 Final

Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote malicious users to inject arbitrary web script or HTML via a message.

Francisco Burzi Php-nuke 8.0 Final

The search module in Php-Nuke allows remote malicious users to gain sensitive information via the (1) "**" or (2) "+" search patterns, which reveals the path in an error message.

Francisco Burzi Php-nuke 8.0 Final

opendir.php script in PHP-Nuke allows remote malicious users to read arbitrary files by specifying the filename as an argument to the requesturl parameter.

Francisco Burzi Php-nuke 8.0 Final

Cross-site scripting (XSS) vulnerability in index.php in the Search module for Php-Nuke allows remote malicious users to inject arbitrary script as other users via the input field.

Francisco Burzi Php-nuke 8.0 Final

SQL injection vulnerability in index.php in the Search module for Php-Nuke allows remote malicious users to execute arbitrary SQL statements via the instory parameter.

Francisco Burzi Php-nuke 8.0 Final

Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote malicious users to include and execute arbitrary local files via a .. (dot dot) in the filename parameter, a different vector than CVE-2006-4190. NOTE: the provenance of this informati...

Francisco Burzi Php-nuke 8.0 Final

1 EDB exploit

The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCalendar 1.1.a, as used in PHP-Nuke, allow remote malicious users to obtain sensitive information via a URL with an invalid argument, which reveals the full path in ...

Francisco Burzi Php-nuke 8.0 Final Shiba-design Nukecalendar 1.1.a

4 EDB exploits

SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote malicious users to execute arbitrary SQL commands via the eid parameter.

Francisco Burzi Php-nuke 8.0 Final Shiba-design Nukecalendar 1.1.a

1 EDB exploit

1 2 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook