Filter
-Infinity
0

PHP-Nukephptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname…

First published (updated )

PHP-NukeMultiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown…

First published (updated )

PHP-Nukesql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allo…

First published (updated )

PHP-Nukeadmin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows re…

7.5
First published (updated )

PHP-NukeXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHP-NukeXSS

First published (updated )

PHP-NukePHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" v…

First published (updated )

PHP-Nukeadmin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload op…

7.5
First published (updated )

PHP-NukePHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow …

7.5
First published (updated )

PHP-NukePHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.…

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHP-Nukebanners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly…

First published (updated )

PHP-NukePHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by …

7.5
First published (updated )

PHP-Nukebb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files an…

First published (updated )

PHP-Nukeopendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the fil…

First published (updated )

PHP-Nukecookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Php-NukeXSS

First published (updated )

PHP-NukeXSS

First published (updated )

PHP-NukeSQL Injection

7.5
First published (updated )

PHP-Nukeindex.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of…

First published (updated )

PHP-Nukeindex.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, all…

7.5
First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHP-NukeXSS

First published (updated )

PHP-NukeInfoleak

First published (updated )

PHP-NukeSQL Injection

7.5
First published (updated )

PHP-NukeInfoleak

First published (updated )

PHP-NukeXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

PHP-NukeXSS

First published (updated )

PHP-NukeSQL Injection

7.5
First published (updated )

PHP-NukeXSS

First published (updated )

PHP-NukeSQL Injection

2.6
First published (updated )

PHP-NukeXSS

First published (updated )

Never miss a vulnerability like this again

Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2025 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203