Most severe vulnerabilities for "phpnuke php-nuke" 8.0

Where

AND

Sort:

Phpnuke Php-nukeCode Injection

Risk 52

Severity

7.5

Code Injection

AV:N/AC:L/Au:N/C:P/I:P/A:P

Multiple PHP remote file inclusion vulnerabilities in modules/MyeGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary PHP code via a URL in the (1) adminpath or (2) basepath parameters. NOTE: this issue might overlap CVE-2006-6795.

First published (updated )

CVE-2006-5494

Phpnuke Php-nukeSQL Injection

Risk 52

Severity

7.5

SQL Injection

AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the chnguid parameter.

First published (updated )

CVE-2011-1480

Phpnuke Php-nukeSQL Injection

Risk 52

Severity

7.5

SQL Injection

AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.

First published (updated )

CVE-2009-1842

Phpnuke Php-nukeSQL Injection

Risk 52

Severity

7.5

SQL Injection

AV:N/AC:L/Au:N/C:P/I:P/A:P

SQL injection vulnerability in the WebLinks module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php.

First published (updated )

CVE-2010-5083

Phpnuke Php-nukeCSRF

Risk 47

Severity

6.8

CSRF

AV:N/AC:M/Au:N/C:P/I:P/A:P

The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is an array before validating the HTTPREFERER, which allows remote attackers to conduct CSRF attacks.

First published (updated )

CVE-2007-1520

Phpnuke Php-nukeXSS

Risk 22

Severity

4.3

XSS

AV:N/AC:M/Au:N/C:N/I:P/A:N

Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "<" instead of a ">" in (1) the onerror attribute of an IMG element, (2) the onload attribute of an IFRAME element, or (3) redirect users to other sites via the META tag.

First published (updated )

CVE-2007-4212

Phpnuke Php-nukeXSS

Risk 22

Severity

4.3

XSS

AV:N/AC:M/Au:N/C:N/I:P/A:N

Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a search operation in the Downloads module, a different product than CVE-2006-3948.

First published (updated )

CVE-2007-1519

Phpnuke Php-nukeDirectory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attacker…

Risk 22

Severity

4.3

AV:N/AC:M/Au:N/C:P/I:N/A:N

Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.

First published (updated )

CVE-2007-1449

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

Trending

Company

Resources

Contact