francisco burzi php-nuke 6.5 final vulnerabilities and exploits

(subscribe to this query)

MS Analysis module 2.0 for PHP-Nuke allows remote malicious users to obtain sensitive information via a direct request to (1) browsers.php, (2) mstrack.php, or (3) title.php, which reveal the full path in a PHP error message.

Francisco Burzi Php-nuke 6.5 Beta1 Francisco Burzi Php-nuke 6.5 Francisco Burzi Php-nuke 7.0 Francisco Burzi Php-nuke 7.0 Final Francisco Burzi Php-nuke 6.5 Rc2 Francisco Burzi Php-nuke 6.5 Rc3 Francisco Burzi Php-nuke 6.5 Final Francisco Burzi Php-nuke 6.7 Francisco Burzi Php-nuke 6.6 Francisco Burzi Php-nuke 6.9 Francisco Burzi Php-nuke 6.5 Rc1

Multiple cross-site scripting (XSS) vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote malicious users to inject arbitrary web script or HTML via the (1) screen parameter to modules.php, (2) module_name parameter to title.php, (3) sortby parameter to modules.php...

Francisco Burzi Php-nuke 6.5 Beta1 Francisco Burzi Php-nuke 6.5 Francisco Burzi Php-nuke 7.0 Francisco Burzi Php-nuke 7.0 Final Francisco Burzi Php-nuke 6.5 Rc2 Francisco Burzi Php-nuke 6.5 Rc3 Francisco Burzi Php-nuke 6.5 Final Francisco Burzi Php-nuke 6.7 Francisco Burzi Php-nuke 6.6 Francisco Burzi Php-nuke 6.9 Francisco Burzi Php-nuke 6.5 Rc1

Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote malicious users to execute arbitrary script as other users via URL-encoded (1) title or (2) fname parameters in the News or Reviews modules.

Francisco Burzi Php-nuke 6.5 Beta1 Francisco Burzi Php-nuke 6.5 Francisco Burzi Php-nuke 7.0 Francisco Burzi Php-nuke 7.0 Final Francisco Burzi Php-nuke 6.5 Rc2 Francisco Burzi Php-nuke 6.5 Rc3 Francisco Burzi Php-nuke 6.0 Francisco Burzi Php-nuke 6.5 Final Francisco Burzi Php-nuke 6.7 Francisco Burzi Php-nuke 6.6 Francisco Burzi Php-nuke 6.9 Francisco Burzi Php-nuke 7.1 Francisco Burzi Php-nuke 6.5 Rc1

1 EDB exploit

SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote malicious users to obtain the administrator password via the c_mid parameter.

Francisco Burzi Php-nuke 6.5 Beta1 Francisco Burzi Php-nuke 6.5 Francisco Burzi Php-nuke 7.0 Francisco Burzi Php-nuke 7.0 Final Francisco Burzi Php-nuke 6.5 Rc2 Francisco Burzi Php-nuke 6.5 Rc3 Francisco Burzi Php-nuke 6.0 Francisco Burzi Php-nuke 6.5 Final Francisco Burzi Php-nuke 6.7 Francisco Burzi Php-nuke 6.6 Francisco Burzi Php-nuke 6.9 Francisco Burzi Php-nuke 7.1 Francisco Burzi Php-nuke 6.5 Rc1

1 EDB exploit

Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x up to and including 7.2, when themes are used, allows remote malicious users to inject arbitrary web script or HTML via a base64-encoded user parameter or cookie.

Francisco Burzi Php-nuke 6.5 Beta1 Francisco Burzi Php-nuke 6.5 Francisco Burzi Php-nuke 7.0 Francisco Burzi Php-nuke 7.2 Francisco Burzi Php-nuke 7.0 Final Francisco Burzi Php-nuke 6.5 Rc2 Francisco Burzi Php-nuke 6.5 Rc3 Francisco Burzi Php-nuke 6.0 Francisco Burzi Php-nuke 6.5 Final Francisco Burzi Php-nuke 6.7 Francisco Burzi Php-nuke 6.6 Francisco Burzi Php-nuke 6.9 Francisco Burzi Php-nuke 7.1 Francisco Burzi Php-nuke 6.5 Rc1

1 EDB exploit

SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x up to and including 7.2 allows remote malicious users to execute arbitrary SQL code and create an administrator account via base64-encoded SQL in the admin parameter.

Francisco Burzi Php-nuke 6.5 Beta1 Francisco Burzi Php-nuke 6.5 Francisco Burzi Php-nuke 7.0 Francisco Burzi Php-nuke 7.2 Francisco Burzi Php-nuke 7.0 Final Francisco Burzi Php-nuke 6.5 Rc2 Francisco Burzi Php-nuke 6.5 Rc3 Francisco Burzi Php-nuke 6.0 Francisco Burzi Php-nuke 6.5 Final Francisco Burzi Php-nuke 6.7 Francisco Burzi Php-nuke 6.6 Francisco Burzi Php-nuke 6.9 Francisco Burzi Php-nuke 7.1 Francisco Burzi Php-nuke 6.5 Rc1

1 EDB exploit

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote malicious users to inject arbitrary web script or HTML via the (1) eid parameter or (2) query parameter to the Encyclopedia module, (3) preview_review function in the Reviews module as demonst...

Francisco Burzi Php-nuke 6.5 Beta1 Francisco Burzi Php-nuke 6.5 Francisco Burzi Php-nuke 7.0 Francisco Burzi Php-nuke 7.2 Francisco Burzi Php-nuke 7.0 Final Francisco Burzi Php-nuke 6.5 Rc2 Francisco Burzi Php-nuke 7.3 Francisco Burzi Php-nuke 6.5 Rc3 Francisco Burzi Php-nuke 6.0 Francisco Burzi Php-nuke 6.5 Final Francisco Burzi Php-nuke 6.7 Francisco Burzi Php-nuke 6.6 Francisco Burzi Php-nuke 6.9 Francisco Burzi Php-nuke 7.1 Francisco Burzi Php-nuke 6.5 Rc1

1 EDB exploit

Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote malicious users to inject arbitrary web script or HTML via hex-encoded XSS sequences in the text parameter, which is checked for dangerous sequences before it ...

Francisco Burzi Php-nuke 6.5 Beta1 Francisco Burzi Php-nuke 6.5 Francisco Burzi Php-nuke 7.0 Francisco Burzi Php-nuke 7.2 Francisco Burzi Php-nuke 7.0 Final Francisco Burzi Php-nuke 6.5 Rc2 Francisco Burzi Php-nuke 7.3 Francisco Burzi Php-nuke 6.5 Rc3 Francisco Burzi Php-nuke 6.0 Francisco Burzi Php-nuke 6.5 Final Francisco Burzi Php-nuke 6.7 Francisco Burzi Php-nuke 6.6 Francisco Burzi Php-nuke 6.9 Francisco Burzi Php-nuke 7.1 Francisco Burzi Php-nuke 6.5 Rc1

1 EDB exploit

The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote malicious users to obtain sensitive information via an invalid date parameter, which generates an error message.

Francisco Burzi Php-nuke 6.5 Beta1 Francisco Burzi Php-nuke 6.5 Francisco Burzi Php-nuke 7.0 Francisco Burzi Php-nuke 7.2 Francisco Burzi Php-nuke 7.0 Final Francisco Burzi Php-nuke 6.5 Rc2 Francisco Burzi Php-nuke 7.3 Francisco Burzi Php-nuke 6.5 Rc3 Francisco Burzi Php-nuke 6.0 Francisco Burzi Php-nuke 6.5 Final Francisco Burzi Php-nuke 6.7 Francisco Burzi Php-nuke 6.6 Francisco Burzi Php-nuke 6.9 Francisco Burzi Php-nuke 7.1 Francisco Burzi Php-nuke 6.5 Rc1

The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote malicious users to cause a denial of service (CPU and memory consumption) via a large, out-of-range score parameter.

Francisco Burzi Php-nuke 6.5 Beta1 Francisco Burzi Php-nuke 6.5 Francisco Burzi Php-nuke 7.0 Francisco Burzi Php-nuke 7.2 Francisco Burzi Php-nuke 7.0 Final Francisco Burzi Php-nuke 6.5 Rc2 Francisco Burzi Php-nuke 7.3 Francisco Burzi Php-nuke 6.5 Rc3 Francisco Burzi Php-nuke 6.0 Francisco Burzi Php-nuke 6.5 Final Francisco Burzi Php-nuke 6.7 Francisco Burzi Php-nuke 6.6 Francisco Burzi Php-nuke 6.9 Francisco Burzi Php-nuke 7.1 Francisco Burzi Php-nuke 6.5 Rc1

1 EDB exploit

1 2 3 NEXT »

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook