Phpnuke - vulnerabilities (CVEs)

32 CVEs in 14 products, 0 in the last 30 days, newest from 2021-04-07.

Products

Php-nuke - 21 CVEs
Web Links Module - 2 CVEs
4nchat - 1 CVEs
4ndvddb - 1 CVEs
Book - 1 CVEs
Easycontent Module - 1 CVEs
Kose Yazilari Module - 1 CVEs
Kutubisitte Component - 1 CVEs
Myheadlines - 1 CVEs
Nukestyles Viewpage Module - 1 CVEs
Okul Module - 1 CVEs
Sarkilar Module - 1 CVEs
Submit News Module - 1 CVEs
Phpnuke - 0 CVEs

Newest CVEs of Phpnuke

CVE-2021-30177 - CVSS 9.8 (critical), 2021-04-07: There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution. This occurs because the U.S.…
CVE-2014-3934 - CVSS 7.5 (high), 2014-06-02: SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics[] parameter to…
CVE-2010-5083 - CVSS 7.5 (high), 2012-02-14: SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add…
CVE-2011-3784 - CVSS 5 (medium), 2011-09-24: Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path…
CVE-2011-1482 - CVSS 6.8 (medium), 2011-06-21: Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the…
CVE-2011-1481 - CVSS 4.3 (medium), 2011-06-21: Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML…
CVE-2011-1480 - CVSS 7.5 (high), 2011-06-21: SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute…
CVE-2009-1842 - CVSS 7.5 (high), 2009-06-01: SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the…
CVE-2008-6779 - CVSS 7.5 (high), 2009-05-01: SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a…
CVE-2008-6728 - CVSS 7.5 (high), 2009-04-20: SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid…
CVE-2008-3151 - CVSS 7.5 (high), 2008-07-11: SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a…
CVE-2008-2020 - CVSS 7.5 (high), 2008-04-30: The CAPTCHA implementation as used in (1) Francisco Burzi PHP-Nuke 7.0 and 8.1, (2) my123tkShop e-Commerce-Suite (aka 123tkShop) 0.9.1, (3) phpMyBitTorrent…
CVE-2008-1220 - CVSS 7.5 (high), 2008-03-10: SQL injection vulnerability in the 4nChat 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the roomid parameter in an…
CVE-2008-1219 - CVSS 7.5 (high), 2008-03-10: SQL injection vulnerability in the Kutub-i Sitte (KutubiSitte) 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid…
CVE-2008-1053 - CVSS 7.5 (high), 2008-02-27: Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid…
CVE-2008-0880 - CVSS 7.5 (high), 2008-02-21: SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the page_id…
CVE-2008-0879 - CVSS 7.5 (high), 2008-02-21: SQL injection vulnerability in modules.php in the Web_Links module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid…
CVE-2008-0881 - CVSS 7.5 (high), 2008-02-21: SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the okulid…
CVE-2008-0827 - CVSS 7.5 (high), 2008-02-19: SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVE-2007-4212 - CVSS 4.3 (medium), 2007-08-08: Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a…
CVE-2007-1520 - CVSS 6.8 (medium), 2007-03-20: The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is an array before validating the…
CVE-2007-1519 - CVSS 4.3 (medium), 2007-03-20: Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the…
CVE-2007-1450 - CVSS 7.5 (high), 2007-03-14: SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module…
CVE-2007-1449 - CVSS 4.3 (medium), 2007-03-14: Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the lang…
CVE-2006-5525 - CVSS 5.1 (medium), 2006-10-26: Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL injection attacks via (1) "/**/UNION "…
CVE-2006-5494 - CVSS 7.5 (high), 2006-10-25: Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers…
CVE-2006-4563 - CVSS 6.8 (medium), 2006-09-06: Cross-site scripting (XSS) vulnerability in the MyHeadlines before 4.3.2 module for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML…
CVE-2005-1028 - CVSS 5 (medium), 2005-05-02: PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2)…
CVE-2004-1842 - CVSS 8.8 (high), 2004-12-31: Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a…
CVE-2003-1545 - CVSS 5 (medium), 2003-12-31: Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in…