Vulnerabilities > Postnuke Software Foundation > High
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2002-12-31 | CVE-2002-2015 | Unspecified vulnerability in Postnuke Software Foundation Postnuke 0.703 PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter. | 7.5 |
| 2002-08-12 | CVE-2002-0739 | Cross-Site Scripting vulnerability in Postnuke Software Foundation Postcalendar 3.0 Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page. | 7.5 |
| 2001-11-21 | CVE-2001-0911 | PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it. | 7.5 |
| 2001-10-13 | CVE-2001-1460 | Unspecified vulnerability in Postnuke Software Foundation Postnuke 0.62/0.63/0.64 SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter. | 7.5 |