Skip to content
Noroxi

php-nuke records

24 published records for vendor php-nuke.

Researcher profile

Entered KEV
0 · 0%
Weaponized
0 · 0%
Pre-auth RCE
15
With a fix record
0%
Median publish → KEV
No record has entered KEV

Records by year

    Bar: total · dark part: CISA KEV.

    Recurring classes

    The weakness classes this vendor ships most often: where to look.

    CWE

    Attack profile

    All records

    24 records
    • CVE-2007-1626
      38Monitor

      PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP cod

      CriticalCVSS 9.3Proof of conceptEPSS 3%

      php-nuke · iframe moduleMar 23, 2007

    • CVE-2008-4767
      37Monitor

      Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to execute arbitrary code by uploadin

      CriticalCVSS 9.0Proof of conceptEPSS 4%

      php-nuke · downloadsplus moduleOct 28, 2008

    • CVE-2007-1034
      30Monitor

      SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke allows remote attacker

      HighCVSS 7.5Proof of conceptEPSS 2%

      php-nuke · emporium moduleFeb 21, 2007

    • CVE-2006-3598
      30Monitor

      SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid para

      HighCVSS 7.5No exploitEPSS 1%

      php-nuke · sections moduleJul 18, 2006

    • CVE-2006-6217
      30Monitor

      PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary

      HighCVSS 7.5No exploitEPSS 1%

      php-nuke · mermaid moduleNov 30, 2006

    • CVE-2008-1298
      30Monitor

      SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in

      HighCVSS 7.5Proof of conceptEPSS 1%

      php-nuke · hadith moduleMar 12, 2008

    • CVE-2008-6865
      30Monitor

      SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands

      HighCVSS 7.5No exploitEPSS 1%

      php-nuke · sections moduleJul 14, 2009

    • CVE-2008-6866
      30Monitor

      SQL injection vulnerability in modules.php in the Current_Issue module for PHP-Nuke allows remote attackers to execute arbitrary SQL command

      HighCVSS 7.5No exploitEPSS 1%

      php-nuke · current issue moduleJul 14, 2009

    • CVE-2006-3599
      30Monitor

      SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands v

      HighCVSS 7.5No exploitEPSS 1%

      php-nuke · advanced classified moduleJul 18, 2006

    • CVE-2008-1315
      30Monitor

      SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat pa

      HighCVSS 7.5Proof of conceptEPSS 1%

      php-nuke · zclassifiedsMar 13, 2008

    • CVE-2008-7226
      30Monitor

      SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allows remote attackers to

      HighCVSS 7.5Proof of conceptEPSS 1%

      php-nuke · recipe moduleSep 14, 2009

    • CVE-2008-0906
      30Monitor

      SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid paramete

      HighCVSS 7.5Proof of conceptEPSS 1%

      php-nuke · php-nuke module documFeb 22, 2008

    • CVE-2008-0907
      30Monitor

      SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid paramete

      HighCVSS 7.5Proof of conceptEPSS 1%

      php-nuke · inhalt moduleFeb 22, 2008

    • CVE-2008-0934
      30Monitor

      SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands vi

      HighCVSS 7.5Proof of conceptEPSS 1%

      nukec · nukecFeb 25, 2008

    • CVE-2008-0922
      30Monitor

      SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid pa

      HighCVSS 7.5Proof of conceptEPSS 1%

      php-nuke · manualesFeb 22, 2008

    • CVE-2007-1934
      28Monitor

      Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbit

      MediumCVSS 6.8Proof of conceptEPSS 2%

      php-nuke · eboard moduleApr 10, 2007

    • CVE-2006-2828
      26Monitor

      Global variable overwrite vulnerability in PHP-Nuke allows remote attackers to conduct remote PHP file inclusion attacks via a modified phpb

      MediumCVSS 6.4Proof of conceptEPSS 3%

      php-nuke · evJun 5, 2006

    • CVE-2007-3332
      21Monitor

      Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary files via a ..

      MediumCVSS 5.0Proof of conceptEPSS 3%

      php-nuke · satel liteJun 21, 2007

    • CVE-2006-0185
      21Monitor

      Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to inject arbitrary web

      MediumCVSS 5.0Proof of conceptEPSS 2%

      php-nuke · news moduleJan 12, 2006

    • CVE-2008-3573
      21Monitor

      The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random

      MediumCVSS 5.0Proof of conceptEPSS 2%

      php-nuke · php-nukeAug 10, 2008

    • CVE-2006-3948
      18Monitor

      Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web script or HTML via t

      MediumCVSS 4.3Proof of conceptEPSS 2%

      php-nuke · inpAug 1, 2006

    • CVE-2009-0302
      18Monitor

      SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arb

      MediumCVSS 4.6Proof of conceptEPSS 1%

      php-nuke · downloads moduleJan 27, 2009

    • CVE-2008-5039
      17Monitor

      Cross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attackers to inject arbitrary web sc

      MediumCVSS 4.3Proof of conceptEPSS 1%

      php-nuke · league moduleNov 12, 2008

    • CVE-2006-4190
      8Monitor

      Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a ..

      LowCVSS 2.1Proof of conceptEPSS 1%

      php-nuke · autohtml moduleAug 16, 2006