Page 7 of 42 results (0.006 seconds)

CVSS: 6.8EPSS: 3%CPEs: 13EXPL: 3

CVE-2007-1520

https://notcve.org/view.php?id=CVE-2007-1520

The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is an array before validating the HTTP_REFERER, which allows remote attackers to conduct CSRF attacks. La protección de cross-site request forgery (CSRF) en PHP-Nuke versión 8.0 y anteriores, no garantiza que la superglobal SERVER sea una matriz antes de validar la HTTP_REFERER, que permite a los atacantes remotos realizar ataques CSRF. • http://osvdb.org/34501 http://phpfi.com/214668 http://secunia.com/advisories/24629 http://www.securityfocus.com/archive/1/462308/100/100/threaded http://www.securityfocus.com/archive/1/462575/100/0/threaded http://www.securityfocus.com/archive/1/462727/100/0/threaded http://www.ush.it/2007/03/09/php-nuke-wild-post-xss http://www.wisec.it/ush/phpnukexss.html • CWE-352: Cross-Site Request Forgery (CSRF) •

CVSS: 4.3EPSS: 0%CPEs: 12EXPL: 0

CVE-2007-1449

https://notcve.org/view.php?id=CVE-2007-1449

Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter. Vulnerabilidad de escalado de directorio en mainfile.php del PHP-Nuke 8.0 y versiones anteriores permite a atacantes remotos leer ficheros de su elección mediante un .. (punto punto) en el parámetro lang. • http://secunia.com/advisories/24484 http://www.securityfocus.com/archive/1/462443/100/0/threaded http://www.securityfocus.com/archive/1/462588/100/0/threaded http://www.securityfocus.com/bid/22909 •

CVSS: 7.5EPSS: 0%CPEs: 11EXPL: 0

CVE-2007-1450

https://notcve.org/view.php?id=CVE-2007-1450

SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter. Vulnerabilidad de inyección SQL en el mainfile.php del PHP-Nuke 8.0 y versiones anteriores permite a atacantes remotos ejecutar comandos SQL de su elección en módulo Top o News mediante el parámetro lang. • http://www.securityfocus.com/archive/1/462443/100/0/threaded http://www.securityfocus.com/bid/22909 •

CVSS: 5.1EPSS: 4%CPEs: 10EXPL: 2

CVE-2006-5525 – PHP-Nuke 7.9 - 'Encyclopedia' SQL Injection

https://notcve.org/view.php?id=CVE-2006-5525

Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL injection attacks via (1) "/**/UNION " or (2) " UNION/**/" sequences, which are not rejected by the protection mechanism, as demonstrated by a SQL injection via the eid parameter in a search action in the Encyclopedia module in modules.php. Vulnerabilidad de lista negra incompleta en mainfile.php en PHP-Nuke 7.9 y anteriores permite a un atacante remoto llevar a cabo un ataque de inyección SQL a través de las secuencias (1) "/**/UNION " o (2) " UNION/**/", lo cual no es aceptado por los mecanismos de protección, como se demostró por la inyección SQL a través del parámetro eid en una acción de búsqueda en el módulo Encyclopedia en modules.php. • https://www.exploit-db.com/exploits/2617 http://secunia.com/advisories/22511 http://www.neosecurityteam.net/index.php?action=advisories&id=27 http://www.securityfocus.com/bid/20674 http://www.vupen.com/english/advisories/2006/4149 https://exchange.xforce.ibmcloud.com/vulnerabilities/29705 •

CVSS: 7.5EPSS: 11%CPEs: 1EXPL: 2

CVE-2006-5494 – pandaBB - 'displayCategory' Remote File Inclusion

https://notcve.org/view.php?id=CVE-2006-5494

Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary PHP code via a URL in the (1) adminpath or (2) basepath parameters. NOTE: this issue might overlap CVE-2006-6795. Múltiples vulnerabilidades de inclusión remota de archivos de PHP en modules/My_eGallery/public/displayCategory.php en el módulo pandaBB para PHP-Nuke permite a atacantes remotos ejecutar código PHP de su elección a través de una URL en los parámetros (1) adminpath o (2) basepath. • https://www.exploit-db.com/exploits/2599 http://secunia.com/advisories/22505 http://www.osvdb.org/29892 http://www.securityfocus.com/bid/20633 http://www.vupen.com/english/advisories/2006/4121 https://exchange.xforce.ibmcloud.com/vulnerabilities/29694 • CWE-94: Improper Control of Generation of Code ('Code Injection') •