Vulnerabilities > Francisco Burzi
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2003-06-09 | CVE-2003-0318 | Cross-Site Scripting vulnerability in PHP-Nuke Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary web script via the year parameter. network francisco-burzi | 4.3 |
| 2002-12-31 | CVE-2002-1803 | HTML Injection vulnerability in Francisco Burzi PHP-Nuke 6.0 Cross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote attackers to inject arbitrary web script or HTML via Javascript in an IMG tag. network francisco-burzi | 4.3 |
| 2002-11-12 | CVE-2002-1242 | SQL Injection vulnerability in Francisco Burzi PHP-Nuke 5.6 SQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify the database and gain privileges via the "bio" argument to modules.php. | 7.5 |
| 2002-08-12 | CVE-2002-0483 | Unspecified vulnerability in Francisco Burzi PHP-Nuke index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that leaks the pathname. | 5.0 |
| 2002-05-16 | CVE-2002-0206 | Remote Arbitrary File Include vulnerability in PHPNuke index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter. | 7.5 |
| 2001-12-31 | CVE-2001-1524 | Cross-Site Scripting vulnerability in PHPNuke Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) uname parameter in user.php, (2) ttitle, letter and file parameters in modules.php, (3) subject, story and storyext parameters in submit.php, (4) upload parameter in admin.php and (5) fname parameter in friend.php. network francisco-burzi | 4.3 |
| 2001-12-31 | CVE-2001-1522 | Cross-Site Scripting vulnerability in Francisco Burzi PHP-Nuke 8.0Final Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via a message. network francisco-burzi | 4.3 |
| 2001-12-06 | CVE-2001-0854 | Unspecified vulnerability in Francisco Burzi PHP-Nuke 5.2 PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user. | 5.0 |
| 2001-11-21 | CVE-2001-0911 | PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it. | 7.5 |
| 2001-11-18 | CVE-2001-0900 | Directory Traversal vulnerability in Bharat Mediratta Gallery Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbitrary files via a .. | 5.0 |