(PVS) Signatures - Tenable Network Security

Solution: Upgrade to version 0.48 or higher.
CVE-2005-0608
FCKeditor with PHPNuke connector.php File Upload
PVS ID: 2661 FAMILY: CGI RISK: HIGH NESSUS ID:Not Available
Description: Synopsis :\n\nThe remote host is vulnerable to a 'file upload' flaw.\n\nThe remote
host is running FCKeditor plugin for PHPNuke. FCKeditor is a web-based
document editor. This version of FCKeditor is vulnerable to a flaw in the way that
it verifies file extensions for file uploads. An attacker exploiting this flaw would be
able to upload potentially malicious code to the web server that might, under certain
circumstances, be executable via a remote HTTP request.
Solution: Upgrade or patch according to vendor recommendations.
CVE-2005-0613
PostNuke < 0.760 RC3 Multiple Vulnerabilities
PVS ID: 2662 FAMILY: CGI RISK: HIGH NESSUS ID:17240
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running PostNuke version 0.760 RC2 or older.
These\nversions suffer from several vulnerabilities, among them :\n\n*) SQL injection
vulnerability in the News, NS-Polls and\nNS-AddStory modules.\n*) SQL injection
vulnerability in the Downloads module.\n*)Cross-site scripting vulnerabilities in the
Downloads\nmodule.\n*) Possible path disclosure vulnerability in the News module.\n\nAn
attacker may use the SQL injection vulnerabilities to obtain the\npassword hash for the
administrator or to corrupt the \ndatabase used by PostNuke.\n\nExploiting the XSS flaws
may enable an attacker to inject arbitrary\nscript code into the browser of site
administrators leading to\ndisclosure of session cookies.\n\nThe remote host is running %L
Solution: Upgrade to version 0.760 RC3 or higher.
CVE-2005-0616
phpCOIN 1.2.1b Multiple Vulnerabilities
Passive Vulnerability Scanner (PVS) Signatures
PVS ID: 2663 FAMILY: CGI RISK: HIGH NESSUS ID:17246
Description: Synopsis :\n\nThe remote web server contains a script that is vulnerable to a SQL injection
attack.\n\nThe remote host is running phpCOIN version 1.2.1b or older. These\nversions
suffer from several vulnerabilities, among them :\n\n*) Multiple SQL injection
vulnerabilities.\nBy calling the 'faq' module with a specially crafted \n'faq_id' parameter or
the 'pages' or 'site' modules with a \nspecially crafted 'id' parameter, a remote attacker may
be\nable to manipulate SQL queries used by the program, thereby \nrevealing sensitive
information or even corrupting the\ndatabase.\n\n*) Multiple cross-site scripting
vulnerabilities.\nA remote attacker may be able to inject arbitrary code\ninto the 'helpdesk'
and 'mail' modules as well as the\n'login.php' script by appending it to a valid
Family Internet Services 681