Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

phpnuke php-nuke 7.7 vulnerabilities and exploits

(subscribe to this query)
515
VMScore
CVE-2006-5525
Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and previous versions allows remote malicious users to conduct SQL injection attacks via (1) "/**/UNION " or (2) " UNION/**/" sequences, which are not rejected by the protection mechanism, as d...
Phpnuke Php-nuke 7.0Phpnuke Php-nuke 7.1Phpnuke Php-nuke 7.8Phpnuke Php-nukePhpnuke Php-nuke 7.6Phpnuke Php-nuke 7.7Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.3
383
VMScore
CVE-2007-4212
Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote malicious users to inject arbitrary web script or HTML via a trailing "<" instead of a ">" in (1) the onerror attribute of an IMG element, (2) the onload at...
Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.6Phpnuke Php-nuke 7.0Phpnuke Php-nuke 7.7Phpnuke Php-nuke 7.8Phpnuke Php-nuke 7.1Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.9Phpnuke Php-nuke 8.0Phpnuke Php-nuke 7.3Phpnuke Php-nuke 7.4
668
VMScore
CVE-2007-1450
SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and previous versions allows remote malicious users to execute arbitrary SQL commands in the Top or News module via the lang parameter.
Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.6Phpnuke Php-nuke 7.7Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.3Phpnuke Php-nuke 8.0.0Phpnuke Php-nuke 7.0Phpnuke Php-nuke 7.1Phpnuke Php-nuke 7.8Phpnuke Php-nuke 7.9
605
VMScore
CVE-2007-1520
The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and previous versions does not ensure the SERVER superglobal is an array before validating the HTTP_REFERER, which allows remote malicious users to conduct CSRF attacks.
Phpnuke Php-nuke 5.6Phpnuke Php-nuke 7.3Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.1Phpnuke Php-nuke 7.9Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.7Phpnuke Php-nukePhpnuke Php-nuke 7.8Phpnuke Php-nuke 7.0Phpnuke Php-nuke 6.5Phpnuke Php-nuke 7.6
383
VMScore
CVE-2007-1449
Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and previous versions allows remote malicious users to read arbitrary files via a .. (dot dot) in the lang parameter.
Phpnuke Php-nuke 7.0Phpnuke Php-nuke 7.1Phpnuke Php-nuke 7.9Phpnuke Php-nuke 8.0Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.3Phpnuke Php-nuke 8.0.0Phpnuke Php-nuke 7.6Phpnuke Php-nuke 7.7Phpnuke Php-nuke 7.8Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.5
383
VMScore
CVE-2011-1481
Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and previous versions allow remote malicious users to inject arbitrary web script or HTML via the (1) sender_name or (2) sender_email parameter in a Feedback action to modules.php.
Phpnuke Php-nuke 5.6Phpnuke Php-nuke 7.3Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.1Phpnuke Php-nuke 5.0.1Phpnuke Php-nuke 5.5Phpnuke Php-nuke 7.9Phpnuke Php-nuke 5.3Phpnuke Php-nuke 6.9Phpnuke Php-nuke 5.3.1Phpnuke Php-nuke 5.0Phpnuke Php-nuke 6.8Phpnuke Php-nuke 6.6Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.7Phpnuke Php-nukePhpnuke Php-nuke 5.2Phpnuke Php-nuke 7.8Phpnuke Php-nuke 6.0Phpnuke Php-nuke 6.7Phpnuke Php-nuke 7.0
605
VMScore
CVE-2011-1482
Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and previous versions allow remote malicious users to hijack the authentication of administrators for requests that (1) add user accounts or (2) grant the administrative pri...
Phpnuke Php-nuke 5.6Phpnuke Php-nuke 7.3Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.1Phpnuke Php-nuke 5.0.1Phpnuke Php-nuke 5.5Phpnuke Php-nuke 7.9Phpnuke Php-nuke 5.3Phpnuke Php-nuke 6.9Phpnuke Php-nuke 5.3.1Phpnuke Php-nuke 5.0Phpnuke Php-nuke 6.8Phpnuke Php-nuke 6.6Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.7Phpnuke Php-nukePhpnuke Php-nuke 5.2Phpnuke Php-nuke 7.8Phpnuke Php-nuke 6.0Phpnuke Php-nuke 6.7Phpnuke Php-nuke 7.0
668
VMScore
CVE-2011-1480
SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and previous versions allows remote malicious users to execute arbitrary SQL commands via the chng_uid parameter.
Phpnuke Php-nuke 5.6Phpnuke Php-nuke 7.3Phpnuke Php-nuke 7.4Phpnuke Php-nuke 7.1Phpnuke Php-nuke 5.0.1Phpnuke Php-nuke 5.5Phpnuke Php-nuke 7.9Phpnuke Php-nuke 5.3Phpnuke Php-nuke 6.9Phpnuke Php-nuke 5.3.1Phpnuke Php-nuke 5.0Phpnuke Php-nuke 6.8Phpnuke Php-nuke 6.6Phpnuke Php-nuke 7.5Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.7Phpnuke Php-nukePhpnuke Php-nuke 5.2Phpnuke Php-nuke 7.8Phpnuke Php-nuke 6.0Phpnuke Php-nuke 6.7Phpnuke Php-nuke 7.0
668
VMScore
CVE-2008-6728
SQL injection vulnerability in the Sections module in PHP-Nuke, probably prior to 8.0, allows remote malicious users to execute arbitrary SQL commands via the artid parameter in a printpage action to modules.php.
Phpnuke Php-nuke 7.1Phpnuke Php-nuke 7.2Phpnuke Php-nuke 7.0Phpnuke Php-nuke 6.5Phpnuke Php-nuke 5.6Phpnuke Php-nuke 5.4Phpnuke Php-nuke 5.5Phpnuke Php-nuke 7.6Phpnuke Php-nuke 7.5Phpnuke Php-nuke 5.3Phpnuke Php-nuke 5.3.1Phpnuke Php-nuke 6.9Phpnuke Php-nukePhpnuke Php-nuke 7.4Phpnuke Php-nuke 7.3Phpnuke Php-nuke 5.1Phpnuke Php-nuke 5.2Phpnuke Php-nuke 6.7Phpnuke Php-nuke 6.8Phpnuke Php-nuke 7.8Phpnuke Php-nuke 7.7Phpnuke Php-nuke 5.0
755
VMScore
CVE-2006-0163
SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote malicious users to execute arbitrary SQL commands via the query parameter, which is used by the search field. NOTE: This is a different vulnerability than CVE-2005-3792...
Francisco Burzi Php-nuke Ev 7.7 R1
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
path traversalCVE-2024-26978CVE-2024-26982wirelessCVE-2023-6949CVE-2024-26980CVE-2024-32766CVE-2024-26939cache poisoning
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook