Vulnerabilities > Phpnuke > PHP Nuke > 8.0
DATE | CVE | VULNERABILITY TITLE | RISK |
---|---|---|---|
2012-02-14 | CVE-2010-5083 | SQL Injection vulnerability in PHPnuke PHP-Nuke and web Links Module SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php. | 7.5 |
2011-09-24 | CVE-2011-3784 | Information Exposure vulnerability in PHPnuke PHP-Nuke 8.0 Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Odyssey/theme.php and certain other files. | 5.0 |
2009-06-01 | CVE-2009-1842 | SQL Injection vulnerability in PHPnuke PHP-Nuke 8.0 SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header. | 7.5 |
2007-08-08 | CVE-2007-4212 | Cross-Site Scripting vulnerability in PHP-Nuke Search Module Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "<" instead of a ">" in (1) the onerror attribute of an IMG element, (2) the onload attribute of an IFRAME element, or (3) redirect users to other sites via the META tag. network phpnuke | 4.3 |
2007-03-14 | CVE-2007-1449 | Local File Include and SQL Injection vulnerability in PHP-Nuke Lang Parameter Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a .. network phpnuke | 4.3 |
2006-10-25 | CVE-2006-5494 | Code Injection vulnerability in PHPnuke PHP-Nuke 8.0 Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary PHP code via a URL in the (1) adminpath or (2) basepath parameters. | 7.5 |