Vulnerabilities

TI-2005-00845 CVE-2005-0902 · GHSA-vgcf-p9vp-mqrr

SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote…

LOW 36

SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the category parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01316 Published 2005-03-29 No fix listed

TI-2005-00844 CVE-2005-0901 · GHSA-gmjj-v8x9-8r4x

Multiple cross-site scripting (XSS) vulnerabilities in NukeBookmarks 0.6 for PHP-Nuke…

LOW 22

Multiple cross-site scripting (XSS) vulnerabilities in NukeBookmarks 0.6 for PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via the (1) catname, (2) markname, (3) comment, or (4) category paramete…

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01164 Published 2005-03-29 No fix listed

TI-2005-00843 CVE-2005-0900 · GHSA-frp4-w3jf-q6mv

marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive…

LOW 26

marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive information via an invalid (1) file or (2) category parameter, which reveal the path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01373 Published 2005-03-29 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote…

Multiple cross-site scripting (XSS) vulnerabilities in NukeBookmarks 0.6 for PHP-Nuke…

marks.php in NukeBookmarks 0.6 for PHP-Nuke allows remote attackers to obtain sensitive…