Show filters
4 Total Results
Displaying 1-4 of 4
Sort by:
Attacker Value
Unknown

CVE-2004-0269

Disclosure Date: November 23, 2004 (last updated February 22, 2025)
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.
0
0
Attacker Value
Unknown

CVE-2002-2032

Disclosure Date: December 31, 2002 (last updated February 22, 2025)
sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote attackers to gain SQL query information by setting the sql_debug parameter to (1) index.php and (2) modules.php.
0
0
Attacker Value
Unknown

CVE-2002-0206

Disclosure Date: May 16, 2002 (last updated February 22, 2025)
index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.
0
0
Attacker Value
Unknown

CVE-2001-1524

Disclosure Date: December 31, 2001 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) uname parameter in user.php, (2) ttitle, letter and file parameters in modules.php, (3) subject, story and storyext parameters in submit.php, (4) upload parameter in admin.php and (5) fname parameter in friend.php.
0
0