Read the docs

Php-nuke

Records24All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high13CVSS 7.0–8.9

Exploited now

Php-nuke records in CISA KEV

No Php-nuke vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Sections Module 2 records LOW Advanced Classified Module 1 record LOW Autohtml Module 1 record LOW Current Issue Module 1 record LOW Downloads Module 1 record LOW Downloadsplus Module 1 record MEDIUM Eboard Module 1 record LOW Emporium Module 1 record LOW

Records

1 record in Downloads Module · all components

TI-2009-00284 CVE-2009-0302 · GHSA-23xg-g252-mcgr

SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and…

Priority LOW 24

SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url parameter in the Add operation to modules.php.

CVSS 2.0MEDIUM 4.6 Network Low privileges Interaction — EPSS 0.01462 Published 2009-01-27 No fix listed CWE-89
Open these records in search →