Nucleus Cms

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Nucleus Cms records in CISA KEV

No Nucleus Cms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nucleus Cms 3 records LOW Nucleus 1 record LOW

Records

3 records in Nucleus Cms · all components

TI-2006-06663 CVE-2006-6920 · GHSA-2pxj-6xcx-769r

Cross-site scripting (XSS) vulnerability in Nucleus before 3.24 allows remote attackers…

LOW 33

Cross-site scripting (XSS) vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly involving (1) lib/ADMIN.php and (2) lib/SKIN.php.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01456 Published 2007-01-11 No fix listed

TI-2008-00469 CVE-2008-0497 · GHSA-8c72-52qr-5hg9

Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, which is not quoted when processing PHP_SELF.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01963 Published 2008-01-30 No fix listed CWE-79

TI-2007-05215 CVE-2007-5429 · GHSA-96rh-7h9m-8c7h

Cross-site scripting (XSS) vulnerability in index.php in Nucleus 3.01 allows remote…

LOW 24

Cross-site scripting (XSS) vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrary web script or HTML via the archive parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.0173 Published 2007-10-12 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	4
Low	0
No CVSS	0