Skip to content
Noroxi

NukeViet records

13 published records for vendor nukeviet.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
0
With a fix record
53.8%
Median publish → KEV
No record has entered KEV

Records by year

  1. 20
  2. 21
  3. 22
  4. 24
  5. 25

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

CWE

Attack profile

All records

13 records
  • CVE-2019-7725
    40Plan

    includes/core/is_user.php in NukeViet before 4.3.04 deserializes the untrusted nvloginhash cookie (i.e., the code relies on PHP's serializat

    CriticalCVSS 9.8No exploitEPSS 2%

    nukeviet · nukevietDec 31, 2020

  • CVE-2019-7726
    40Plan

    modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Refere

    CriticalCVSS 9.8No exploitEPSS 2%

    nukeviet · nukevietDec 31, 2020

  • CVE-2020-21808
    39Monitor

    SQL Injection vulnerability in NukeViet CMS 4.0.10 - 4.3.07 via:the topicsid parameter in modules/news/admin/addtotopics.php.

    CriticalCVSS 9.8No exploitEPSS 1%

    nukeviet · nukevietJul 30, 2021

  • CVE-2020-21809
    39Monitor

    SQL Injection vulnerability in NukeViet CMS module Shops 4.0.29 and 4.3 via the (1) listid parameter in detail.php and the (2) group_price o

    CriticalCVSS 9.8No exploitEPSS 1%

    nukeviet · nukevietJul 30, 2021

  • CVE-2024-36528
    35Monitor

    nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before have a Deserialization vulnerability which results in code execution via /ad

    HighCVSS 8.8No exploitEPSS 0%

    nukeviet · egovernmentJun 10, 2024

  • CVE-2020-13155
    35Monitor

    clearsystem.php in NukeViet 4.4 allows CSRF with resultant HTML injection via the deltype parameter to the admin/index.php?nv=webtools&op=cl

    HighCVSS 8.8No exploitEPSS 0%

    nukeviet · nukevietJun 23, 2020

  • CVE-2020-13157
    26Monitor

    modules\users\admin\edit.php in NukeViet 4.4 allows CSRF to change a user's password via an admin/index.php?nv=users&op=edit&userid= URI.

    MediumCVSS 6.5No exploitEPSS 0%

    nukeviet · nukevietJun 23, 2020

  • CVE-2020-13156
    26Monitor

    modules\users\admin\add_user.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=user_add URI.

    MediumCVSS 6.5No exploitEPSS 0%

    nukeviet · nukevietJun 23, 2020

  • CVE-2020-22765
    24Monitor

    Cross Site Scripting (XSS) vulnerability in NukeViet cms 4.4.0 via the editor in the News module.

    MediumCVSS 6.1No exploitEPSS 0%

    nukeviet · nukevietJul 30, 2021

  • CVE-2022-3975
    24Monitor

    NukeViet CMS Data URL Request.php filterAttr cross site scripting

    MediumCVSS 6.1No exploitEPSS 0%

    nukeviet · nukevietNov 13, 2022

  • CVE-2024-36531
    22Monitor

    nukeviet v.4.5 and before and nukeviet-egov v.1.2.02 and before are vulnerable to arbitrary code execution via the /admin/extensions/upload.

    MediumCVSS 5.7No exploitEPSS 0%

    nukeviet · egovernmentJun 10, 2024

  • CVE-2022-30874
    21Monitor

    There is a Cross Site Scripting Stored (XSS) vulnerability in NukeViet CMS before 4.5.02.

    MediumCVSS 5.4No exploitEPSS 0%

    nukeviet · nukevietJun 21, 2022

  • CVE-2025-8772
    8Monitor

    Vinades NukeViet Module index.php server-side request forgery

    LowCVSS 2.1No exploitEPSS 0%

    nukeviet · nukevietAug 9, 2025