Vulnerabilities

TI-2008-01473 CVE-2008-1539 · GHSA-2377-297w-hggm

SQL injection vulnerability in includes/dynamic_titles.php in PHP-Nuke Platinum 7.6.b.5…

LOW 35

SQL injection vulnerability in includes/dynamic_titles.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary SQL commands via the p parameter to modules.php for the Forums module.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.00967 Published 2008-03-28 No fix listed CWE-89

TI-2007-05451 CVE-2007-5676 · GHSA-x54v-mwpg-8mmr

PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke…

LOW 34

PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary PHP code via a URL in the nuke_bb_root_path parameter.

CVSS 2.0MEDIUM 6.8 Network No auth Interaction — EPSS 0.02291 Published 2007-10-24 No fix listed CWE-94

Vulnerabilities

Filters

SQL injection vulnerability in includes/dynamic_titles.php in PHP-Nuke Platinum 7.6.b.5…

PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke…