Login Request a demo
PH
Vendor
Phpnuke
13 products with CVEs on record
34
CVEs
0
On KEV
0
New 30D
Products
PH
Php-nuke
Phpnuke
9.8
21 CVEs0 on KEV0 new
WL
Web Links Module
Phpnuke
–
2 CVEs0 on KEV0 new
4N
4nchat
Phpnuke
–
1 CVEs0 on KEV0 new
4N
4ndvddb
Phpnuke
–
1 CVEs0 on KEV0 new
BO
Book
Phpnuke
–
1 CVEs0 on KEV0 new
EM
Easycontent Module
Phpnuke
–
1 CVEs0 on KEV0 new
KY
Kose Yazilari Module
Phpnuke
–
1 CVEs0 on KEV0 new
KC
Kutubisitte Component
Phpnuke
–
1 CVEs0 on KEV0 new
MY
Myheadlines
Phpnuke
–
1 CVEs0 on KEV0 new
NV
Nukestyles Viewpage Module
Phpnuke
–
1 CVEs0 on KEV0 new
OM
Okul Module
Phpnuke
–
1 CVEs0 on KEV0 new
SM
Sarkilar Module
Phpnuke
–
1 CVEs0 on KEV0 new
SN
Submit News Module
Phpnuke
–
1 CVEs0 on KEV0 new
Recent CVEs
CVEProductCVSSEPSSPublishedSummary
CVE-2021-30177
PH
Php-nuke
Phpnuke
9.8
2%
Apr 7There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution
CVE-2014-3934
PH
Php-nuke
Phpnuke
–
2%
Jun 2SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics[] parameter to modules.php
CVE-2010-5083
WL
Web Links Module
Phpnuke
–
1%
Feb 14SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to…
CVE-2011-3784
PH
Php-nuke
Phpnuke
–
1%
Sep 24Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message,…
CVE-2011-1482
PH
Php-nuke
Phpnuke
–
1%
Jun 21Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of…
CVE-2011-1481
PH
Php-nuke
Phpnuke
–
1%
Jun 21Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1)…
CVE-2011-1480
PH
Php-nuke
Phpnuke
–
1%
Jun 21SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via…
CVE-2009-1842
PH
Php-nuke
Phpnuke
–
1%
Jun 1SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header
CVE-2008-6779
SM
Sarkilar Module
Phpnuke
–
1%
May 1SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showcontent action to…
CVE-2008-6728
PH
Php-nuke
Phpnuke
–
1%
Apr 20SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a…
CVE-2008-3151
4N
4ndvddb
Phpnuke
–
1%
Jul 11SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a show_dvd action
CVE-2008-2020
PH
Php-nuke
Phpnuke
7.5
2%
Apr 30The CAPTCHA implementation as used in (1) Francisco Burzi PHP-Nuke 7.0 and 8.1, (2) my123tkShop e-Commerce-Suite (aka 123tkShop) 0.9.1, (3) phpMyBitTorrent 1.2.2, (4) TorrentFlux…
CVE-2008-1219
KC
Kutubisitte Component
Phpnuke
–
1%
Mar 10SQL injection vulnerability in the Kutub-i Sitte (KutubiSitte) 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid parameter in a…
CVE-2008-1220
4N
4nchat
Phpnuke
–
1%
Mar 10SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the roomid parameter in an index action to…
CVE-2008-1053
KY
Kose Yazilari Module
Phpnuke
–
1%
Feb 27Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a (1)…
CVE-2008-0881
OM
Okul Module
Phpnuke
–
1%
Feb 21SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the okulid parameter in an okullar…
CVE-2008-0879
WL
Web Links Module
Phpnuke
–
1%
Feb 21SQL injection vulnerability in modules.php in the Web_Links module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewlink…
CVE-2008-0880
EM
Easycontent Module
Phpnuke
–
1%
Feb 21SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the page_id parameter
CVE-2008-0827
BO
Book
Phpnuke
–
1%
Feb 19SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter
CVE-2007-4212
PH
Php-nuke
Phpnuke
–
1%
Aug 8Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "<" instead of a…
CVE-2007-1520
PH
Php-nuke
Phpnuke
–
1%
Mar 20The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is an array before validating the HTTP_REFERER, which allows…
CVE-2007-1519
PH
Php-nuke
Phpnuke
–
1%
Mar 20Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a…
CVE-2007-1449
PH
Php-nuke
Phpnuke
–
1%
Mar 14Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a
CVE-2007-1450
PH
Php-nuke
Phpnuke
–
1%
Mar 14SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter
CVE-2006-5525
PH
Php-nuke
Phpnuke
–
1%
Oct 26Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL injection attacks via (1) "/**/UNION " or (2) " UNION/**/"…
CVE-2006-5494
PH
Php-nuke
Phpnuke
–
3%
Oct 25Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary…
CVE-2006-4563
MY
Myheadlines
Phpnuke
–
2%
Sep 6Cross-site scripting (XSS) vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the myh_op…
CVE-2005-1028
PH
Php-nuke
Phpnuke
–
1%
May 2PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2) the Surveys module,…
CVE-2004-1842
PH
Php-nuke
Phpnuke
8.8
2%
Dec 31Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php
CVE-2003-1340
PH
Php-nuke
Phpnuke
–
1%
Dec 31Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to execute arbitrary SQL commands via (1) a uid (user) cookie to…
CVE-2003-1545
NV
Nukestyles Viewpage Module
Phpnuke
–
4%
Dec 31Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in the file parameter
CVE-2001-0899
PH
Php-nuke
Phpnuke
–
9%
Nov 16Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable