Page 5 of 99 results (0.002 seconds)

CVSS: 7.5EPSS: 1%CPEs: 1EXPL: 2

CVE-2005-3304 – PHP-Nuke Downloads Module - 'url' SQL Injection

https://notcve.org/view.php?id=CVE-2005-3304

Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via (1) the username parameter in the Your Account page, (2) the url parameter in the Downloads module, and (3) the description parameter in the Web_Links module. • https://www.exploit-db.com/exploits/32747 http://marc.info/?l=bugtraq&m=113017049702436&w=2 http://rgod.altervista.org/phpnuke78sql.html http://secunia.com/advisories/17315 http://www.osvdb.org/20291 http://www.osvdb.org/20292 http://www.osvdb.org/20293 http://www.securityfocus.com/bid/15178 http://www.vupen.com/english/advisories/2005/2191 https://exchange.xforce.ibmcloud.com/vulnerabilities/22851 •

CVSS: 10.0EPSS: 0%CPEs: 15EXPL: 0

CVE-2005-3016

https://notcve.org/view.php?id=CVE-2005-3016

Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack vectors. • http://secunia.com/advisories/16843 http://www.phpnuke.org/modules.php?name=News&file=article&sid=7435 •

CVSS: 5.0EPSS: 0%CPEs: 18EXPL: 0

CVE-2005-1386

https://notcve.org/view.php?id=CVE-2005-1386

PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) ipban.php, (2) db.php, (3) lang-norwegian.php, (4) lang-indonesian.php, (5) lang-greek.php, (6) a request to Web_Links with the portuguese language (lang-portuguese.php), (7) a request to Web_Links with the indonesian language (lang-indonesian.php), (8) a request to the survey module with the indonesian language (lang-indonesian.php), (9) a request to the Reviews module with the portuguese language, or (10) a request to the Journal module with the portuguese language, which reveal the path in an error message. • http://marc.info/?l=bugtraq&m=111478982629035&w=2 •

CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 1

CVE-2005-1180

https://notcve.org/view.php?id=CVE-2005-1180

HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web caches via hex-encoded CRLF ("%0d%0a") sequences in the forwarder parameter. • http://marc.info/?l=bugtraq&m=111359804013536&w=2 http://secunia.com/advisories/14965 http://www.digitalparadox.org/advisories/pnuke.txt http://www.osvdb.org/15647 https://exchange.xforce.ibmcloud.com/vulnerabilities/20116 •

CVSS: 4.3EPSS: 0%CPEs: 18EXPL: 1

CVE-2005-1027 – PHP-Nuke 6.x/7.x 'Downloads' Module - 'Lid' Cross-Site Scripting

https://notcve.org/view.php?id=CVE-2005-1027

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) username parameter in the Your_Account module, (2) avatarcategory parameter in the Your_Account module, or (3) lid parameter in the Downloads module. • https://www.exploit-db.com/exploits/25341 http://marc.info/?l=bugtraq&m=111272010303144&w=2 http://www.securityfocus.com/archive/1/321324 http://www.securityfocus.com/bid/7570 https://exchange.xforce.ibmcloud.com/vulnerabilities/11994 •