Vulnerabilities > Phpnuke > PHP Nuke > 8.0

DATE CVE VULNERABILITY TITLE RISK
2012-02-14 CVE-2010-5083 SQL Injection vulnerability in PHPnuke PHP-Nuke and web Links Module
SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php.
network
low complexity
phpnuke CWE-89
7.5
2011-09-24 CVE-2011-3784 Information Exposure vulnerability in PHPnuke PHP-Nuke 8.0
Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Odyssey/theme.php and certain other files.
network
low complexity
phpnuke CWE-200
5.0
2009-06-01 CVE-2009-1842 SQL Injection vulnerability in PHPnuke PHP-Nuke 8.0
SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.
network
low complexity
phpnuke CWE-89
7.5
2007-08-08 CVE-2007-4212 Cross-Site Scripting vulnerability in PHP-Nuke Search Module
Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "<" instead of a ">" in (1) the onerror attribute of an IMG element, (2) the onload attribute of an IFRAME element, or (3) redirect users to other sites via the META tag.
network
phpnuke
4.3
2007-03-14 CVE-2007-1449 Local File Include and SQL Injection vulnerability in PHP-Nuke Lang Parameter
Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a ..
network
phpnuke
4.3
2006-10-25 CVE-2006-5494 Code Injection vulnerability in PHPnuke PHP-Nuke 8.0
Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary PHP code via a URL in the (1) adminpath or (2) basepath parameters.
network
low complexity
phpnuke CWE-94
7.5