PH
Product
Php-nuke
21
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 2Medium 0Low 0
Watch
Add Php-nuke to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2021-30177 | 9.8 | Apr 7 | There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution Affected: 8.3.3 |
| CVE-2004-1842 | 8.8 | Dec 31 | Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php Affected: 6.0 through 7.1 |
| CVE-2008-2020 | 7.5 | Apr 30 | The CAPTCHA implementation as used in (1) Francisco Burzi PHP-Nuke 7.0 and 8.1, (2) my123tkShop e-Commerce-Suite (aka 123tkShop) 0.9.1, (3) phpMyBitTorrent 1.2.2, (4) TorrentFlux… Affected: 7.0; 8.1 |
| CVE-2014-3934 | – | Jun 2 | SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics[] parameter to modules.php Affected: 8.3 |
| CVE-2010-5083 | – | Feb 14 | SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to… Affected: 8.0 |
| CVE-2011-3784 | – | Sep 24 | Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message,… Affected: 8.0 |
| CVE-2011-1482 | – | Jun 21 | Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of… Affected: through 8.0; 5.0; 5.0.1; 5.1; 5.2; 5.3; +20 more |
| CVE-2011-1481 | – | Jun 21 | Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1)… Affected: through 8.0; 5.0; 5.0.1; 5.1; 5.2; 5.3; +20 more |
| CVE-2011-1480 | – | Jun 21 | SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via… Affected: through 8.0; 5.0; 5.0.1; 5.1; 5.2; 5.3; +20 more |
| CVE-2009-1842 | – | Jun 1 | SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header Affected: 8.0 |
| CVE-2008-6728 | – | Apr 20 | SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a… Affected: through 7.9; 5.0; 5.0.1; 5.1; 5.2; 5.3; +19 more |
| CVE-2007-4212 | – | Aug 8 | Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "<" instead of a… Affected: 7.0; 7.1; 7.2; 7.3; 7.4; 7.5; +5 more |
| CVE-2007-1519 | – | Mar 20 | Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a… Affected: through 8.0 |
| CVE-2007-1520 | – | Mar 20 | The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is an array before validating the HTTP_REFERER, which allows… Affected: through 8.0; 5.6; 6.5; 7.0; 7.1; 7.2; +7 more |
| CVE-2007-1450 | – | Mar 14 | SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter Affected: 7.0; 7.1; 7.2; 7.3; 7.4; 7.5; +5 more |
| CVE-2007-1449 | – | Mar 14 | Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a Affected: 7.0; 7.1; 7.2; 7.3; 7.4; 7.5; +6 more |
| CVE-2006-5525 | – | Oct 26 | Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL injection attacks via (1) "/**/UNION " or (2) " UNION/**/"… Affected: through 7.9; 7.0; 7.1; 7.2; 7.3; 7.4; +4 more |
| CVE-2006-5494 | – | Oct 25 | Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary… Affected: 8.0 |
| CVE-2005-1028 | – | May 2 | PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2) the Surveys module,… Affected: 6.0 through 7.6 |
| CVE-2003-1340 | – | Dec 31 | Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to execute arbitrary SQL commands via (1) a uid (user) cookie to… Affected: 5.6; 6.5 |
| CVE-2001-0899 | – | Nov 16 | Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable Affected: All versions, or not specified |
Showing 21