Vulmon Recent Vulnerabilities Product List Research Posts Trends Blog About Contact

francisco burzi php-nuke 7.0 final vulnerabilities and exploits

(subscribe to this query)
NA

CVE-2006-6200

Multiple SQL injection vulnerabilities in the (1) rate_article and (2) rate_complete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and previous versions, when magic_quotes_gpc is disabled, allow remote malicious users to execute arbitrary ...
Francisco Burzi Php-nuke 7.8 Patched 3.2Francisco Burzi Php-nuke 7.0Francisco Burzi Php-nuke 7.4Francisco Burzi Php-nuke 7.5Francisco Burzi Php-nuke 7.2Francisco Burzi Php-nuke 7.8Francisco Burzi Php-nuke 7.0 FinalFrancisco Burzi Php-nuke 7.3Francisco Burzi Php-nuke 7.6Francisco Burzi Php-nuke 7.9Francisco Burzi Php-nuke 7.7Francisco Burzi Php-nuke 7.1
NA

CVE-2006-0805

The CAPTCHA functionality in php-Nuke 6.0 up to and including 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent (HTTP_USER_AGENT), which allows remote malicious users to bypass CAPTCHA controls by fixing the User Agent, performing a valid...
Francisco Burzi Php-nuke 6.5 Beta1Francisco Burzi Php-nuke 6.5Francisco Burzi Php-nuke 7.0Francisco Burzi Php-nuke 7.4Francisco Burzi Php-nuke 7.5Francisco Burzi Php-nuke 7.2Francisco Burzi Php-nuke 7.8Francisco Burzi Php-nuke 7.0 FinalFrancisco Burzi Php-nuke 6.5 Rc2Francisco Burzi Php-nuke 7.3Francisco Burzi Php-nuke 6.5 Rc3Francisco Burzi Php-nuke 7.6Francisco Burzi Php-nuke 7.9Francisco Burzi Php-nuke 6.0Francisco Burzi Php-nuke 7.7Francisco Burzi Php-nuke 6.5 FinalFrancisco Burzi Php-nuke 6.7Francisco Burzi Php-nuke 6.6Francisco Burzi Php-nuke 6.9Francisco Burzi Php-nuke 7.1Francisco Burzi Php-nuke 6.5 Rc1
NA

CVE-2006-0676

Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote malicious users to inject arbitrary web script or HTML via the pagetitle parameter.
Francisco Burzi Php-nuke 6.5 Beta1Francisco Burzi Php-nuke 6.5Francisco Burzi Php-nuke 7.0Francisco Burzi Php-nuke 7.2Francisco Burzi Php-nuke 7.8Francisco Burzi Php-nuke 6.5 Rc2Francisco Burzi Php-nuke 7.3Francisco Burzi Php-nuke 6.5 Rc3Francisco Burzi Php-nuke 7.6Francisco Burzi Php-nuke 7.9Francisco Burzi Php-nuke 6.0Francisco Burzi Php-nuke 7.7Francisco Burzi Php-nuke 6.5 FinalFrancisco Burzi Php-nuke 6.7Francisco Burzi Php-nuke 6.6Francisco Burzi Php-nuke 6.9Francisco Burzi Php-nuke 7.1Francisco Burzi Php-nuke 6.5 Rc1
NA

CVE-2005-3792

Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions prior to 7.9 with patch 3.1, allows remote malicious users to execute arbitrary SQL commands, as demonstrated via the query parameter in a stories type.
Francisco Burzi Php-nuke 7.2Francisco Burzi Php-nuke 7.8Francisco Burzi Php-nuke 7.0 FinalFrancisco Burzi Php-nuke 7.3Francisco Burzi Php-nuke 7.6Francisco Burzi Php-nuke 7.7Francisco Burzi Php-nuke 7.1
NA

CVE-2005-3016

Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke prior to 7.9 Final have unknown impact and attack vectors.
Francisco Burzi Php-nukeFrancisco Burzi Php-nuke 6.5Francisco Burzi Php-nuke 7.0Francisco Burzi Php-nuke 7.4Francisco Burzi Php-nuke 7.5Francisco Burzi Php-nuke 7.2Francisco Burzi Php-nuke 6.8Francisco Burzi Php-nuke 7.3Francisco Burzi Php-nuke 7.6Francisco Burzi Php-nuke 6.0Francisco Burzi Php-nuke 7.7Francisco Burzi Php-nuke 6.7Francisco Burzi Php-nuke 6.6Francisco Burzi Php-nuke 6.9Francisco Burzi Php-nuke 7.1
NA

CVE-2005-1386

PHP-Nuke 7.6 and previous versions allows remote malicious users to obtain sensitive information via a direct request to (1) ipban.php, (2) db.php, (3) lang-norwegian.php, (4) lang-indonesian.php, (5) lang-greek.php, (6) a request to Web_Links with the portuguese language (lang-p...
Francisco Burzi Php-nuke 6.5 Beta1Francisco Burzi Php-nuke 6.5Francisco Burzi Php-nuke 7.0Francisco Burzi Php-nuke 7.4Francisco Burzi Php-nuke 7.5Francisco Burzi Php-nuke 7.2Francisco Burzi Php-nuke 7.0 FinalFrancisco Burzi Php-nuke 6.5 Rc2Francisco Burzi Php-nuke 7.3Francisco Burzi Php-nuke 6.5 Rc3Francisco Burzi Php-nuke 7.6Francisco Burzi Php-nuke 6.0Francisco Burzi Php-nuke 6.5 FinalFrancisco Burzi Php-nuke 6.7Francisco Burzi Php-nuke 6.6Francisco Burzi Php-nuke 6.9Francisco Burzi Php-nuke 7.1Francisco Burzi Php-nuke 6.5 Rc1
NA

CVE-2005-1024

modules.php in PHP-Nuke 6.x to 7.6 allows remote malicious users to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.
Francisco Burzi Php-nuke 6.5 Beta1Francisco Burzi Php-nuke 6.5Francisco Burzi Php-nuke 7.0Francisco Burzi Php-nuke 7.4Francisco Burzi Php-nuke 7.5Francisco Burzi Php-nuke 7.2Francisco Burzi Php-nuke 7.0 FinalFrancisco Burzi Php-nuke 6.5 Rc2Francisco Burzi Php-nuke 7.3Francisco Burzi Php-nuke 6.5 Rc3Francisco Burzi Php-nuke 7.6Francisco Burzi Php-nuke 6.0Francisco Burzi Php-nuke 6.5 FinalFrancisco Burzi Php-nuke 6.7Francisco Burzi Php-nuke 6.6Francisco Burzi Php-nuke 6.9Francisco Burzi Php-nuke 7.1Francisco Burzi Php-nuke 6.5 Rc1
NA

CVE-2005-0999

SQL injection vulnerability in the Top module for PHP-Nuke 6.x up to and including 7.6 allows remote malicious users to execute arbitrary SQL commands via the querylang parameter.
Francisco Burzi Php-nuke 6.5 Beta1Francisco Burzi Php-nuke 6.5Francisco Burzi Php-nuke 7.0Francisco Burzi Php-nuke 7.4Francisco Burzi Php-nuke 7.5Francisco Burzi Php-nuke 7.2Francisco Burzi Php-nuke 7.0 FinalFrancisco Burzi Php-nuke 6.5 Rc2Francisco Burzi Php-nuke 7.3Francisco Burzi Php-nuke 6.5 Rc3Francisco Burzi Php-nuke 7.6Francisco Burzi Php-nuke 6.0Francisco Burzi Php-nuke 6.5 FinalFrancisco Burzi Php-nuke 6.7Francisco Burzi Php-nuke 6.6Francisco Burzi Php-nuke 6.9Francisco Burzi Php-nuke 7.1Francisco Burzi Php-nuke 6.5 Rc1
NA

CVE-2005-1027

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x up to and including 7.6 allow remote malicious users to inject arbitrary web script or HTML via the (1) username parameter in the Your_Account module, (2) avatarcategory parameter in the Your_Account module, or (...
Francisco Burzi Php-nuke 6.5 Beta1Francisco Burzi Php-nuke 6.5Francisco Burzi Php-nuke 7.0Francisco Burzi Php-nuke 7.4Francisco Burzi Php-nuke 7.5Francisco Burzi Php-nuke 7.2Francisco Burzi Php-nuke 7.0 FinalFrancisco Burzi Php-nuke 6.5 Rc2Francisco Burzi Php-nuke 7.3Francisco Burzi Php-nuke 6.5 Rc3Francisco Burzi Php-nuke 7.6Francisco Burzi Php-nuke 6.0Francisco Burzi Php-nuke 6.5 FinalFrancisco Burzi Php-nuke 6.7Francisco Burzi Php-nuke 6.6Francisco Burzi Php-nuke 6.9Francisco Burzi Php-nuke 7.1Francisco Burzi Php-nuke 6.5 Rc1
NA

CVE-2005-1023

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote malicious users to inject arbitrary web script or HTML via the (1) min parameter to the Search module, (2) the categories parameter to the FAQ module, or (3) the ltr parameter to the Encyclope...
Francisco Burzi Php-nuke 6.5 Beta1Francisco Burzi Php-nuke 6.5Francisco Burzi Php-nuke 7.0Francisco Burzi Php-nuke 7.4Francisco Burzi Php-nuke 7.5Francisco Burzi Php-nuke 7.2Francisco Burzi Php-nuke 7.0 FinalFrancisco Burzi Php-nuke 6.5 Rc2Francisco Burzi Php-nuke 7.3Francisco Burzi Php-nuke 6.5 Rc3Francisco Burzi Php-nuke 7.6Francisco Burzi Php-nuke 6.0Francisco Burzi Php-nuke 6.5 FinalFrancisco Burzi Php-nuke 6.7Francisco Burzi Php-nuke 6.6Francisco Burzi Php-nuke 6.9Francisco Burzi Php-nuke 7.1Francisco Burzi Php-nuke 6.5 Rc1
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
TCPCVE-2024-4577CVE-2024-2695CVE-2024-31870injectionCVE-2024-3813arbitrary codeCVE-2024-27801CVE-2024-30120
Vulmon Logo Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Product List Vendor List Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook