Sploitus

120 exploited vulnerabilities in Php-Nuke

Showing 1–50 of 120, highest-scoring first

Vendors
Php Nuke, Php, Php Nuke Team, Nuke Cops, Osc2Nuke, Oscnuke
With known exploits
120
Affected Eve-nuke Eve-nuke Forum versions
= 0.1
Affected Francisco Burzi Php-nuke versions
= 5.0, 5.0.1, 4.0.4, 4.4, 8.0_final, 7.9, 6.0, 7.0, 7.0_final, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.8_patched_3.2, 6.5, 6.5_beta1, 6.5_final, 6.5_rc1, 6.5_rc2, 6.5_rc3, 6.6, 6.7, 6.9
Affected Phpnuke Php-nuke versions
= 8.3.3, 8.3, 8.0, 5.0, 5.0.1, 5.1, 5.2, 5.3, 5.3.1, 5.4, 5.5, 5.6, 6.0, 6.5, 6.6, 6.7, 6.8, 6.9, 7.0, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.9
Affected Php-nuke Iframe Module versions
All versions
Affected Php-nuke Downloadsplus Module versions
All versions
Affected Phpnuke Submit News Module versions
All versions
Affected Phpnuke Web Links Module versions
All versions
Affected Maxdev My Egallery versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 35 of these already have exploit code on Sploitus

CVE-2007-1778 1 exploit
CVSS 10.0 HIGH 2007-03-30
PHP-Nuke Module Eve-Nuke 0.1 - 'mysql.php' Remote File Inclusion
CVE-2001-1025
CVSS 10.0 HIGH 2001-08-31
CVE-2001-0320
CVSS 10.0 HIGH 2001-04-04FIX AVAILABLE
CVE-2021-30177
CVSS 9.8 CRITICAL 2021-04-07FIX AVAILABLE
CVE-2007-1626 1 exploit
CVSS 9.3 HIGH 2007-03-23
PHP-Nuke - 'iframe.php' Remote File Inclusion
CVE-2008-4767 1 exploit
CVSS 9.0 HIGH 2008-10-28
PHP-Nuke DownloadsPlus Module - Arbitrary File Upload
CVE-2014-3934 1 exploit
CVSS 7.5 HIGH 2014-06-02FIX AVAILABLE
PHP-Nuke 'Submit_News' Component - SQL Injection
CVE-2010-5083 1 exploit
CVSS 7.5 HIGH 2012-02-14FIX AVAILABLE
PHP-Nuke 8.x - Blind SQL Injection
CVE-2011-1480
CVSS 7.5 HIGH 2011-06-21FIX AVAILABLE
CVE-2009-1842 1 exploit
CVSS 7.5 HIGH 2009-06-01FIX AVAILABLE
PHP-Nuke 8.0 - '/main/tracking/userLog.php' SQL Injection
CVE-2008-7038 2 exploits
CVSS 7.5 HIGH 2009-08-24
XOOPS Module My_eGallery 3.04 - 'gid' SQL InjectionPHP-Nuke Module My_eGallery 2.7.9 - SQL Injection
CVE-2008-6866
CVSS 7.5 HIGH 2009-07-14
CVE-2008-6865
CVSS 7.5 HIGH 2009-07-14
CVE-2008-6779 1 exploit
CVSS 7.5 HIGH 2009-05-01
PHP-Nuke Sarkilar Module - 'id' SQL Injection
CVE-2008-6728
CVSS 7.5 HIGH 2009-04-20FIX AVAILABLE
CVE-2008-3512 1 exploit
CVSS 7.5 HIGH 2008-08-07FIX AVAILABLE
PHP-Nuke Kleinanzeigen Module - 'lid' SQL Injection
CVE-2008-1315 1 exploit
CVSS 7.5 HIGH 2008-03-13
PHP-Nuke zClassifieds Module - 'cat' SQL Injection
CVE-2008-1298 1 exploit
CVSS 7.5 HIGH 2008-03-12
PHP-Nuke Hadith Module - 'cat' SQL Injection
CVE-2008-1053 1 exploit
CVSS 7.5 HIGH 2008-02-27
PHP-Nuke Module Kose_Yazilari - 'artid' SQL Injection
CVE-2008-0906 1 exploit
CVSS 7.5 HIGH 2008-02-22
PHP-Nuke Module Docum - 'artid' SQL Injection
CVE-2008-0880 1 exploit
CVSS 7.5 HIGH 2008-02-21
PHP-Nuke Module EasyContent - 'page_id' SQL Injection
CVE-2008-0879 1 exploit
CVSS 7.5 HIGH 2008-02-21
PHP-Nuke Web_Links Module - 'cid' SQL Injection
CVE-2008-0827 1 exploit
CVSS 7.5 HIGH 2008-02-19FIX AVAILABLE
PHP-Nuke Module books SQL - 'cid' SQL Injection
CVE-2007-6376 1 exploit
CVSS 7.5 HIGH 2007-12-15FIX AVAILABLE
PHP-Nuke 8.0 - 'autohtml.php' Local File Inclusion
CVE-2007-5069 1 exploit
CVSS 7.5 HIGH 2007-09-24
PHP-Nuke addon Nuke Mobile Entartainment 1.0 - Local File Inclusion
CVE-2007-1034 2 exploits
CVSS 7.5 HIGH 2007-02-21FIX AVAILABLE
PHP-Nuke Module Emporium 2.3.0 - 'id_catg' SQL InjectionPHP-Nuke Module Emporium 2.3.0 - SQL Injection
CVE-2007-0372
CVSS 7.5 HIGH 2007-01-19FIX AVAILABLE
CVE-2007-0309 1 exploit
CVSS 7.5 HIGH 2007-01-18FIX AVAILABLE
PHP-Nuke 7.x - 'Block-Old_Articles.php' SQL Injection
CVE-2006-6234
CVSS 7.5 HIGH 2006-12-02FIX AVAILABLE
CVE-2006-6200
CVSS 7.5 HIGH 2006-12-01
CVE-2006-5720 1 exploit
CVSS 7.5 HIGH 2006-11-04FIX AVAILABLE
PHP-Nuke 7.x Journal Module - 'search.php' SQL Injection
CVE-2006-5494 1 exploit
CVSS 7.5 HIGH 2006-10-25
pandaBB - 'displayCategory' Remote File Inclusion
CVE-2006-3598
CVSS 7.5 HIGH 2006-07-14FIX AVAILABLE
CVE-2006-0908
CVSS 7.5 HIGH 2006-02-28FIX AVAILABLE
CVE-2006-0907
CVSS 7.5 HIGH 2006-02-28FIX AVAILABLE
CVE-2006-0805 1 exploit
CVSS 7.5 HIGH 2006-02-21
PHP-Nuke 7.x - CAPTCHA Bypass
CVE-2006-0679 1 exploit
CVSS 7.5 HIGH 2006-02-16FIX AVAILABLE
PHPNuke-Your_Account.txt
CVE-2006-0308 1 exploit
CVSS 7.5 HIGH 2006-01-19FIX AVAILABLE
PHP-Nuke Module htmltonuke 2.0alpha - 'htmltonuke.php' Remote File Inclusion
CVE-2005-4715
CVSS 7.5 HIGH 2005-12-31FIX AVAILABLE
CVE-2005-3792 1 exploit
CVSS 7.5 HIGH 2005-11-24FIX AVAILABLE
PHP-Nuke 7.8 Search Module - SQL Injection
CVE-2005-3304 1 exploit
CVSS 7.5 HIGH 2005-10-25FIX AVAILABLE
PHP-Nuke Downloads Module - 'url' SQL Injection
CVE-2005-0999 1 exploit
CVSS 7.5 HIGH 2005-04-07
PHP-Nuke 6.x < 7.6 Top module - SQL Injection
CVE-2005-0997 1 exploit
CVSS 7.5 HIGH 2005-04-07FIX AVAILABLE
PHP-Nuke 7.6 Web_Links Module - Multiple SQL Injections
CVE-2004-2295 1 exploit
CVSS 7.5 HIGH 2004-12-31FIX AVAILABLE
PHP-Nuke 6.x/7.x Reviews Module - 'order' SQL Injection
CVE-2004-2044 1 exploit
CVSS 7.5 HIGH 2004-06-01FIX AVAILABLE
PHP-Nuke 5.x/6.x/7.x - Direct Script Access Security Bypass
CVE-2004-2018 1 exploit
CVSS 7.5 HIGH 2004-12-31FIX AVAILABLE
PHP-Nuke 6.x/7.x - 'Modpath' File Inclusion
CVE-2004-2000 1 exploit
CVSS 7.5 HIGH 2004-05-05FIX AVAILABLE
PHP-Nuke Downloads Module - 'sid' SQL Injection
CVE-2004-1932 1 exploit
CVSS 7.5 HIGH 2004-04-12FIX AVAILABLE
PHP-Nuke - SQL Injection Edit/Save Messages
CVE-2004-1929 1 exploit
CVSS 7.5 HIGH 2004-04-13FIX AVAILABLE
PHP-Nuke 6.x/7.x - Multiple SQL Injections
CVE-2004-0732
CVSS 7.5 HIGH 2004-07-23