Vulnerability index

Browse CVEs

49 matching
Filters 2 Clear all
Severity

Filters apply as you choose them.

Php Nuke HIGH 7.5
CVE-2007-6376

Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary local file…

No fix yet
Fix from $1,950 2007-12-15
Php Nuke HIGH 7.5
CVE-2007-0372

Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via (1) the active pa…

No fix yet
Fix from $1,950 2007-01-19
Php Nuke HIGH 7.5
CVE-2006-6234

Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote attackers to execute arbitrar…

No fix yet
Fix from $1,950 2006-12-02
Php Nuke HIGH 7.5
CVE-2006-1847

SQL injection vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to execute arbitrary SQL commands via the user_i…

Mitigation only
Fix from $1,950 2006-04-19
Php Nuke HIGH 7.5
CVE-2006-0907

SQL injection vulnerability in PHP-Nuke before 7.8 Patched 3.2 allows remote attackers to execute arbitrary SQL commands via encoded /%2a (/*) sequen…

No fix yet
Fix from $1,950 2006-02-28
Php Nuke HIGH 7.5
CVE-2006-0908

PHP-Nuke 7.8 Patched 3.2 allows remote attackers to bypass SQL injection protection mechanisms via /%2a (/*) sequences with the "ad_click" word in th…

No fix yet
Fix from $1,950 2006-02-28
Php Nuke HIGH 7.5
CVE-2006-0805

The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once per day based on the User Agent (HTTP_U…

No fix yet
Fix from $1,950 2006-02-21
Php Nuke Ev HIGH 7.5
CVE-2006-0679

SQL injection vulnerability in index.php in the Your_Account module in PHP-Nuke 7.8 and earlier allows remote attackers to execute arbitrary SQL comm…

No fix yet
Fix from $1,950 2006-02-16
Php Nuke Ev HIGH 7.5
CVE-2006-0163EPSS 7%

SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remote attackers to execute arbitrary SQL co…

No fix yet
Fix from $1,950 2006-01-11
Php Nuke HIGH 7.5
CVE-2005-3792EPSS 44%

Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote att…

No fix yet
Fix from $1,950 2005-11-24
Php Nuke HIGH 7.5
CVE-2005-3304EPSS 6%

Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execute arbitrary PHP code via (1) the userna…

No fix yet
Fix from $1,950 2005-10-26
Php Nuke MEDIUM 5.0
CVE-2005-1386

PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) ipban.php, (2) db.php, (3) lang-norwegia…

Mitigation only
Fix from $1,600 2005-05-03
Php Nuke HIGH 7.5
CVE-2005-0997

Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the …

Mitigation only
Fix from $1,950 2005-05-02
Php Nuke HIGH 7.5
CVE-2005-0999

SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylan…

No fix yet
Fix from $1,950 2005-05-02
Php Nuke MEDIUM 5.0
CVE-2005-0996

Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1)…

Mitigation only
Fix from $1,600 2005-05-02
Php Nuke MEDIUM 5.0
CVE-2005-0998

The Web_Links module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a divisio…

Mitigation only
Fix from $1,600 2005-05-02
Php Nuke MEDIUM 5.0
CVE-2005-0433

Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to (1) db.php, (2) mainfile.php, (…

No fix yet
Fix from $1,600 2005-02-15
Php Nuke HIGH 7.5
CVE-2004-1914

SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execute arbitrary SQL commands via …

No fix yet
Fix from $1,950 2004-12-31
Php Nuke HIGH 7.5
CVE-2004-2018

PHP remote file inclusion vulnerability in index.php in Php-Nuke 6.x through 7.3 allows remote attackers to execute arbitrary PHP code by modifying t…

No fix yet
Fix from $1,950 2004-12-31
Php Nuke MEDIUM 6.8
CVE-2004-2354

SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter…

No fix yet
Fix from $1,600 2004-12-31
Php Nuke MEDIUM 5.0
CVE-2004-1912

The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCalendar 1.1.a, as used in PHP-Nuk…

No fix yet
Fix from $1,600 2004-12-31
Php Nuke MEDIUM 5.0
CVE-2004-2019

The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays…

No fix yet
Fix from $1,600 2004-12-31
Php Nuke MEDIUM 5.0
CVE-2004-2296

The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitiv…

No fix yet
Fix from $1,600 2004-12-31
Php Nuke MEDIUM 5.0
CVE-2004-2297

The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large, out-of-range…

No fix yet
Fix from $1,600 2004-12-31
Php Nuke MEDIUM 6.8
CVE-2004-0265

Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbitrary script as other users via…

No fix yet
Fix from $1,600 2004-11-23
Php Nuke MEDIUM 5.0
CVE-2004-0266

SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allows remote attackers to obtain the admin…

No fix yet
Fix from $1,600 2004-11-23
Php Nuke HIGH 7.5
CVE-2004-0732

SQL injection vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to execute arbitrary SQL statements via the instor…

No fix yet
Fix from $1,950 2004-07-27
Php Nuke HIGH 7.5
CVE-2004-0737

Multiple cross-site scripting vulnerabilities in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary web script o…

Mitigation only
Fix from $1,950 2004-07-27
Php Nuke HIGH 7.5
CVE-2004-0738

Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote attackers to execute arbitrary SQL via the (1) min or (2) categ …

Mitigation only
Fix from $1,950 2004-07-27
Php Nuke MEDIUM 6.8
CVE-2004-0731

Cross-site scripting (XSS) vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to inject arbitrary script as other u…

No fix yet
Fix from $1,600 2004-07-27