Skip to content
Noroxi

nuked-klan records

15 published records for vendor nuked-klan.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
4
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    15 records
    • CVE-2007-2556
      31Monitor

      SQL injection vulnerability in Nuked-klaN 1.7.6 allows remote attackers to execute arbitrary SQL commands via the X-Forwarded-For (X_FORWARD

      HighCVSS 7.5Proof of conceptEPSS 3%

      nuked-klan · nuked-klanMay 9, 2007

    • CVE-2005-3305
      31Monitor

      Multiple SQL injection vulnerabilities in Nuked Klan 1.7 allow remote attackers to execute arbitrary SQL commands via the (1) forum_id or (2

      HighCVSS 7.5Proof of conceptEPSS 2%

      nuked-klan · nuked-klanOct 25, 2005

    • CVE-2010-4925
      30Monitor

      SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute arbitrary SQL comman

      HighCVSS 7.5Proof of conceptEPSS 1%

      nuked-klan · partenaires moduleOct 9, 2011

    • CVE-2007-0083
      27Monitor

      Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a

      MediumCVSS 6.8No exploitEPSS 1%

      nuked-klan · nuked-klanJan 5, 2007

    • CVE-2003-1238
      24Monitor

      Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via

      MediumCVSS 5.8No exploitEPSS 2%

      nuked-klan · nuked-klanDec 31, 2003

    • CVE-2004-1937
      22Monitor

      Multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers to read or include arbitrary files via ..

      MediumCVSS 5.0Proof of conceptEPSS 8%

      nuked-klan · nuked-klanDec 31, 2004

    • CVE-2006-3479
      20Monitor

      Cross-site request forgery (CSRF) vulnerability in the del_block function in modules/Admin/block.php in Nuked-Klan 1.7.5 and earlier and 1.7

      MediumCVSS 5.0No exploitEPSS 1%

      nuked-klan · nuked-klanJul 10, 2006

    • CVE-2006-1419
      20Monitor

      SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands

      MediumCVSS 5.0Proof of conceptEPSS 1%

      nuked-klan · nuked-klanMar 28, 2006

    • CVE-2003-1371
      18Monitor

      Nuked-Klan 1.3b, and possibly earlier versions, allows remote attackers to obtain sensitive server information via an op parameter set to ph

      MediumCVSS 4.3Proof of conceptEPSS 3%

      nuked-klan · nuked-klanDec 31, 2003

    • CVE-2006-0506
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in Nuked-klaN 1.7 allows remote attackers to inject arbitrary web script or HTML via t

      MediumCVSS 4.3No exploitEPSS 1%

      nuked-klan · nuked-klanFeb 1, 2006

    • CVE-2005-3436
      17Monitor

      Cross-site scripting (XSS) vulnerability in Nuked-Klan 1.7 allows remote attackers to inject arbitrary web script or HTML via the (1) Search

      MediumCVSS 4.3No exploitEPSS 1%

      nuked-klan · nuked-klanNov 2, 2005

    • CVE-2006-4480
      17Monitor

      Incomplete blacklist vulnerability in the nk_CSS function in nuked.php in Nuked-Klan 1.7 SP4.3 allows remote attackers to bypass anti-XSS fe

      MediumCVSS 4.3No exploitEPSS 1%

      nuked-klan · nuked-klanAug 31, 2006

    • CVE-2003-1370
      17Monitor

      Multiple cross-site scripting (XSS) vulnerabilities in Nuked-Klan 1.2b allow remote attackers to inject arbitrary HTML or web script via (1)

      MediumCVSS 4.3No exploitEPSS 1%

      nuked-klan · nuked-klanDec 31, 2003

    • CVE-2008-7132
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.3 beta allows remote attackers to inject arbitrary web script or HTML

      MediumCVSS 4.3No exploitEPSS 1%

      nuked-klan · nuked-klanSep 1, 2009

    • CVE-2007-6090
      17Monitor

      Cross-site scripting (XSS) vulnerability in index.php in Nuked-Klan 1.7.5 allows remote attackers to inject arbitrary web script or HTML via

      MediumCVSS 4.3No exploitEPSS 0%

      nuked-klan · nuked-klanNov 21, 2007