Php-Nuke

24 CVEs across 24 Php-Nuke products. Browse Php-Nuke vulnerabilities, severities, and proof-of-concept exploits.

Php-Nuke products with known CVEs

ProductCVEs
Sections Module2
Advanced Classified Module1
Autohtml Module1
Current Issue Module1
Downloads Module1
Downloadsplus Module1
Eboard Module1
Emporium Module1
Ev1
Hadith Module1
Iframe Module1
Inhalt Module1
Inp1
League Module1
Manuales1
Mermaid Module1
News Module1
Nukec Module1
Php-Nuke1
Php-Nuke Module Docum1
Pool Module1
Recipe Module1
Satel Lite1
Zclassifieds1
Php-Nuke CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2008-72262009-09-14SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allows remote attackers to execute arbitrary…
CVE-2008-68662009-07-14SQL injection vulnerability in modules.php in the Current_Issue module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parame…
CVE-2008-68652009-07-14SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid param…
CVE-2009-03022009-01-27SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands…
CVE-2008-50392008-11-12Cross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web script or HTML via th…
CVE-2008-47672008-10-28Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploading a file with (1)…
CVE-2008-35732008-08-10The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the…
CVE-2008-13152008-03-13SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter to modules…
CVE-2008-12982008-03-12SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in a viewcat action t…
CVE-2008-09342008-02-25SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_catg param…
CVE-2008-09222008-02-22SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdo…
CVE-2008-09072008-02-22SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVE-2008-09062008-02-22SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle…
CVE-2007-33322007-06-21Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the…
CVE-2007-19342007-04-10Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files vi…
CVE-2007-16262007-03-23PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP code via a URL in the…
CVE-2007-10342007-02-21SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke allows remote attackers to execute arbitr…
CVE-2006-62172006-12-01PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL…
CVE-2006-41902006-08-17Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. (dot dot) in the n…
CVE-2006-39482006-08-01Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web script or HTML via the query parameter.
CVE-2006-35992006-07-18SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_ads param…
CVE-2006-35982006-07-18SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarti…
CVE-2006-28282006-06-05Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpbb_root_path paramet…
CVE-2006-01852006-01-12Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via…