Nukedit

Records5All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high2CVSS 7.0–8.9

Exploited now

Nukedit records in CISA KEV

No Nukedit vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Nukedit 5 records LOW

Records

5 records

TI-2006-02645 CVE-2006-2737 · GHSA-qg25-rr8f-97f2

utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new…

LOW 39

utilities/register.asp in Nukedit 4.9.6 and earlier allows remote attackers to create new users as part of arbitrary groups, including the administrative group, via a modified groupid parameter when creating a user via t…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.03352 Published 2006-06-01 No fix listed

TI-2008-05298 CVE-2008-5582 · GHSA-7c7j-37vv-cm52

SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly…

LOW 35

SQL injection vulnerability in utilities/login.asp in Nukedit 4.9.x, and possibly earlier, allows remote attackers to execute arbitrary SQL commands via the email parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00999 Published 2008-12-15 No fix listed CWE-89

TI-2007-02349 CVE-2007-2432 · GHSA-44wf-6h25-4x7x

Cross-site scripting (XSS) vulnerability in utilities/search.asp in nukedit 4.9.7b allows…

LOW 34

Cross-site scripting (XSS) vulnerability in utilities/search.asp in nukedit 4.9.7b allows remote attackers to inject arbitrary web script or HTML via the terms parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.01837 Published 2007-05-02 No fix listed

TI-2008-05479 CVE-2008-5773 · GHSA-fr79-wrcg-rgxc

Nukedit 4.9.8 stores sensitive information under the web root with insufficient access…

LOW 28

Nukedit 4.9.8 stores sensitive information under the web root with insufficient access control, which allows remote attackers to download the database file containing usernames and passwords via a direct request for data…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.02587 Published 2008-12-30 No fix listed CWE-264

TI-2007-03920 CVE-2007-4052 · GHSA-6c8x-pc5w-78fc

Cross-site scripting (XSS) vulnerability in utilities/login.asp in nukedit 4.9.7 and…

LOW 23

Cross-site scripting (XSS) vulnerability in utilities/login.asp in nukedit 4.9.7 and earlier allows remote attackers to inject arbitrary web script or HTML via the email parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01479 Published 2007-07-30 No fix listed

Open these records in search →

Critical	0
High	2
Medium	3
Low	0
No CVSS	0