Show filters
26 Total Results
Displaying 11-20 of 26
Sort by:
Attacker Value
Unknown
CVE-2008-1298
Disclosure Date: March 12, 2008 (last updated October 04, 2023)
SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in a viewcat action to modules.php.
0
Attacker Value
Unknown
CVE-2008-0934
Disclosure Date: February 25, 2008 (last updated October 04, 2023)
SQL injection vulnerability in modules.php in the NukeC 2.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_catg parameter in a ViewCatg action.
0
Attacker Value
Unknown
CVE-2008-0922
Disclosure Date: February 22, 2008 (last updated October 04, 2023)
SQL injection vulnerability in the Manuales 0.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewdownload action to modules.php.
0
Attacker Value
Unknown
CVE-2008-0906
Disclosure Date: February 22, 2008 (last updated October 04, 2023)
SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle operation.
0
Attacker Value
Unknown
CVE-2008-0907
Disclosure Date: February 22, 2008 (last updated October 04, 2023)
SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter.
0
Attacker Value
Unknown
CVE-2007-3332
Disclosure Date: June 21, 2007 (last updated October 04, 2023)
Directory traversal vulnerability in Satellite.php in Satel Lite for PhpNuke allows remote attackers to read arbitrary files via a .. (dot dot) sequence in the name parameter in a modload action.
0
Attacker Value
Unknown
CVE-2007-1934
Disclosure Date: April 10, 2007 (last updated October 04, 2023)
Directory traversal vulnerability in member.php in the eBoard 1.0.7 module for PHP-Nuke allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the GLOBALS[name] parameter.
0
Attacker Value
Unknown
CVE-2007-1626
Disclosure Date: March 23, 2007 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in iframe.php in the iFrame Module for PHP-NUKE allows remote attackers to execute arbitrary PHP code via a URL in the file parameter.
0
Attacker Value
Unknown
CVE-2007-1034
Disclosure Date: February 21, 2007 (last updated October 04, 2023)
SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category_id parameter.
0
Attacker Value
Unknown
CVE-2006-6217
Disclosure Date: December 01, 2006 (last updated October 04, 2023)
PHP remote file inclusion vulnerability in formdisp.php in the Mermaid 1.2 module for PHP-Nuke allows remote attackers to execute arbitrary PHP code via a URL in the module_name parameter.
0
