Filter
Versions
Francisco Burzi PHP-NukeMultiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown…
10
First published (updated )
Francisco Burzi PHP-Nukesql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allo…
First published (updated )
Francisco Burzi PHP-Nukeadmin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows re…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Francisco Burzi PHP-NukePHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" v…
10
First published (updated )
Francisco Burzi PHP-Nukeadmin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload op…
7.5
First published (updated )
Francisco Burzi PHP-NukePHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow …
7.5
First published (updated )
Francisco Burzi PHP-NukePHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.…
First published (updated )
Francisco Burzi PHP-Nukebanners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Francisco Burzi PHP-NukePHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by …
7.5
First published (updated )
Francisco Burzi PHP-Nukebb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files an…
10
First published (updated )
Francisco Burzi PHP-Nukeopendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the fil…
First published (updated )
Francisco Burzi PHP-Nukecookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Francisco Burzi PHP-Nukeindex.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of…
First published (updated )
Francisco Burzi PHP-Nukeindex.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, all…
7.5
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Francisco Burzi PHP-NukeThe Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU …
First published (updated )
Francisco Burzi PHP-NukeThe preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows sy…
First published (updated )
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.