Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

nucleus cms nucleus cms 3.22 vulnerabilities and exploits

(subscribe to this query)
NA
CVE-2006-6920
Cross-site scripting (XSS) vulnerability in Nucleus prior to 3.24 allows remote malicious users to inject arbitrary web script or HTML via unknown vectors, possibly involving (1) lib/ADMIN.php and (2) lib/SKIN.php.
Nucleus Cms Nucleus Cms 3.0Nucleus Cms Nucleus Cms 3.23Nucleus Cms Nucleus Cms 3.1Nucleus Cms Nucleus Cms 3.2Nucleus Cms Nucleus Cms 3.21Nucleus Cms Nucleus Cms 3.22Nucleus Cms Nucleus Cms 3.0 RcNucleus Cms Nucleus Cms 3.01
NA
CVE-2006-3136
Multiple PHP remote file inclusion vulnerabilities in Nucleus 3.23 allow remote malicious users to execute arbitrary PHP code via a URL the DIR_LIBS parameter in (1) path/action.php, and to files in path/nucleus including (2) media.php, (3) /xmlrpc/server.php, and (4) /xmlrpc/api...
Nucleus Group Nucleus Cms 3.0Nucleus Group Nucleus Cms 3.23Nucleus Group Nucleus Cms 3.0 RcNucleus Group Nucleus Cms 3.1Nucleus Group Nucleus Cms 3.21Nucleus Group Nucleus Cms 3.22Nucleus Group Nucleus Cms 3.0 1Nucleus Group Nucleus Cms 3.2
NA
CVE-2009-0929
Directory traversal vulnerability in the media manager in Nucleus CMS prior to 3.40 allows remote malicious users to read arbitrary files via unknown vectors.
Nucleus Group Nucleus Cms 3.23Nucleus Group Nucleus Cms 3.21Nucleus Group Nucleus CmsNucleus Group Nucleus Cms 3.0Nucleus Group Nucleus Cms 3.0 1Nucleus Group Nucleus Cms 3.22Nucleus Group Nucleus Cms 3.1Nucleus Group Nucleus Cms 3.2Nucleus Group Nucleus Cms 3.01Nucleus Group Nucleus Cms 3.0 Rc
NA
CVE-2008-0497
Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote malicious users to inject arbitrary web script or HTML via the PATH_INFO, which is not quoted when processing PHP_SELF.
Nucleus Cms Nucleus Cms 3.31
NA
CVE-2006-2583
PHP remote file inclusion vulnerability in nucleus/libs/PLUGINADMIN.php in Nucleus 3.22 and previous versions allows remote malicious users to execute arbitrary PHP code via a URL in the GLOBALS[DIR_LIBS] parameter.
Nucleus Group Nucleus Cms
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook