Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

php-nuke vulnerabilities and exploits

(subscribe to this query)
668
VMScore
CVE-2011-1480
SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the chng_uid parameter.
Phpnuke Php-nuke 5.6Phpnuke Php-nuke 7.3Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.1Phpnuke Php-nuke 5.0.1Phpnuke Php-nuke 5.5Phpnuke Php-nuke 7.9Phpnuke Php-nuke 5.3Phpnuke Php-nuke 6.9Phpnuke Php-nuke 5.3.1Phpnuke Php-nuke 5.0Phpnuke Php-nuke 6.8Phpnuke Php-nuke 6.6Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.7Phpnuke Php-nukePhpnuke Php-nuke 5.2Phpnuke Php-nuke 7.8Phpnuke Php-nuke 6.0Phpnuke Php-nuke 6.7Phpnuke Php-nuke 7.0
383
VMScore
CVE-2011-1481
Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) sender_name or (2) sender_email parameter in a Feedback action to modules.php.
Phpnuke Php-nuke 5.6Phpnuke Php-nuke 7.3Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.1Phpnuke Php-nuke 5.0.1Phpnuke Php-nuke 5.5Phpnuke Php-nuke 7.9Phpnuke Php-nuke 5.3Phpnuke Php-nuke 6.9Phpnuke Php-nuke 5.3.1Phpnuke Php-nuke 5.0Phpnuke Php-nuke 6.8Phpnuke Php-nuke 6.6Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.7Phpnuke Php-nukePhpnuke Php-nuke 5.2Phpnuke Php-nuke 7.8Phpnuke Php-nuke 6.0Phpnuke Php-nuke 6.7Phpnuke Php-nuke 7.0
605
VMScore
CVE-2011-1482
Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and previous versions allow remote malicious users to hijack the authentication of administrators for requests that (1) add user accounts or (2) grant the administrative pri...
Phpnuke Php-nuke 5.6Phpnuke Php-nuke 7.3Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.1Phpnuke Php-nuke 5.0.1Phpnuke Php-nuke 5.5Phpnuke Php-nuke 7.9Phpnuke Php-nuke 5.3Phpnuke Php-nuke 6.9Phpnuke Php-nuke 5.3.1Phpnuke Php-nuke 5.0Phpnuke Php-nuke 6.8Phpnuke Php-nuke 6.6Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.7Phpnuke Php-nukePhpnuke Php-nuke 5.2Phpnuke Php-nuke 7.8Phpnuke Php-nuke 6.0Phpnuke Php-nuke 6.7Phpnuke Php-nuke 7.0
668
VMScore
CVE-2008-6728
SQL injection vulnerability in the Sections module in PHP-Nuke, probably prior to 8.0, allows remote malicious users to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php.
Phpnuke Php-nuke 7.1Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.0Phpnuke Php-nuke 6.5Phpnuke Php-nuke 5.6Phpnuke Php-nuke 5.4Phpnuke Php-nuke 5.5Phpnuke Php-nuke 7.6Phpnuke Php-nuke 7.5Phpnuke Php-nuke 5.3Phpnuke Php-nuke 5.3.1Phpnuke Php-nuke 6.9Phpnuke Php-nukePhpnuke Php-nuke 7.4Phpnuke Php-nuke 7.3Phpnuke Php-nuke 5.1Phpnuke Php-nuke 5.2Phpnuke Php-nuke 6.7Phpnuke Php-nuke 6.8Phpnuke Php-nuke 7.8Phpnuke Php-nuke 7.7Phpnuke Php-nuke 5.0
605
VMScore
CVE-2007-1520
The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and previous versions does not ensure the SERVER superglobal is an array before validating the HTTP_REFERER, which allows remote malicious users to conduct CSRF attacks.
Phpnuke Php-nuke 5.6Phpnuke Php-nuke 7.3Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.1Phpnuke Php-nuke 7.9Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.7Phpnuke Php-nukePhpnuke Php-nuke 7.8Phpnuke Php-nuke 7.0Phpnuke Php-nuke 6.5Phpnuke Php-nuke 7.6
383
VMScore
CVE-2007-1449
Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and previous versions allows remote malicious users to read arbitrary files via a .. (dot dot) in the lang parameter.
Phpnuke Php-nuke 7.0Phpnuke Php-nuke 7.1Phpnuke Php-nuke 7.9Phpnuke Php-nuke 8.0Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.3Phpnuke Php-nuke 8.0.0Phpnuke Php-nuke 7.6Phpnuke Php-nuke 7.7Phpnuke Php-nuke 7.8Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.5
515
VMScore
CVE-2006-5525
Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and previous versions allows remote malicious users to conduct SQL injection attacks via (1) "/**/UNION " or (2) " UNION/**/" sequences, which are not rejected by the protection mechanism, as d...
Phpnuke Php-nuke 7.0Phpnuke Php-nuke 7.1Phpnuke Php-nuke 7.8Phpnuke Php-nukePhpnuke Php-nuke 7.6Phpnuke Php-nuke 7.7Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.3
668
VMScore
CVE-2007-1450
SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and previous versions allows remote malicious users to execute arbitrary SQL commands in the Top or News module via the lang parameter.
Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.6Phpnuke Php-nuke 7.7Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.3Phpnuke Php-nuke 8.0.0Phpnuke Php-nuke 7.0Phpnuke Php-nuke 7.1Phpnuke Php-nuke 7.8Phpnuke Php-nuke 7.9
383
VMScore
CVE-2007-4212
Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote malicious users to inject arbitrary web script or HTML via a trailing "<" instead of a ">" in (1) the onerror attribute of an IMG element, (2) the onload at...
Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.6Phpnuke Php-nuke 7.0Phpnuke Php-nuke 7.7Phpnuke Php-nuke 7.8Phpnuke Php-nuke 7.1Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.9Phpnuke Php-nuke 8.0Phpnuke Php-nuke 7.3Phpnuke Php-nuke 7.4
650
VMScore
CVE-2004-0269
SQL injection vulnerability in PHP-Nuke 6.9 and previous versions, and possibly 7.x, allows remote malicious users to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.
Francisco Burzi Php-nuke 1.0Francisco Burzi Php-nuke 5.0Francisco Burzi Php-nuke 5.0.1Francisco Burzi Php-nuke 5.6Francisco Burzi Php-nuke 6.0Francisco Burzi Php-nuke 6.7Francisco Burzi Php-nuke 6.9Francisco Burzi Php-nuke 2.5Francisco Burzi Php-nuke 3.0Francisco Burzi Php-nuke 5.1Francisco Burzi Php-nuke 5.2Francisco Burzi Php-nuke 6.5Francisco Burzi Php-nuke 6.5 Beta1Francisco Burzi Php-nuke 4.0Francisco Burzi Php-nuke 4.3Francisco Burzi Php-nuke 5.2aFrancisco Burzi Php-nuke 5.3.1Francisco Burzi Php-nuke 6.5 FinalFrancisco Burzi Php-nuke 6.5 Rc1Francisco Burzi Php-nuke 4.4Francisco Burzi Php-nuke 4.4.1aFrancisco Burzi Php-nuke 5.4
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
injectionCVE-2024-30983CVE-2023-4235CVE-2024-21338privilegeencryptionCVE-2023-4232CVE-2024-31497CVE-2024-32341
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook