Filtered by vendor Php-nuke
Subscribe
Total
24 CVE
CVE | Vendors | Products | Updated | CVSS v2 | CVSS v3 |
---|---|---|---|---|---|
CVE-2006-3948 | 1 Php-nuke | 1 Inp | 2025-04-03 | 4.3 MEDIUM | N/A |
Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke INP allows remote attackers to inject arbitrary web script or HTML via the query parameter. | |||||
CVE-2006-3599 | 1 Php-nuke | 1 Advanced Classified Module | 2025-04-03 | 7.5 HIGH | N/A |
SQL injection vulnerability in the Nuke Advanced Classifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id_ads parameter in an EditAds op. | |||||
CVE-2006-4190 | 1 Php-nuke | 1 Autohtml Module | 2025-04-03 | 2.1 LOW | N/A |
Directory traversal vulnerability in autohtml.php in the AutoHTML module for PHP-Nuke allows local users to include arbitrary files via a .. (dot dot) in the name parameter for a modload operation. | |||||
CVE-2006-3598 | 1 Php-nuke | 1 Sections Module | 2025-04-03 | 7.5 HIGH | N/A |
SQL injection vulnerability in the Sections module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle op. |