GCVE - cpe:2.3:a:tru-zone:nukeet:3.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:tru-zone:nukeet:3.2:*:*:*:*:*:*:*

part: a version: 3.2 update: *

Vendor	Tru Zone (`5a0dd58c-2b9a-53bc-8976-262e8223f57a`)
Product	Nukeet (`72a2d08d-3fce-5d06-99e9-e690b814d140`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*

Notes

Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:sourceforge/nukeet`	purl2cpe	2026-06-01 10:11:15.818383

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-2134`	vulnerable	2026-06-08 04:50:23.030329	Details available The Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to obtain access to arbitrary user accounts, and alter or delete data, via a modified username in an unspecified cookie. Published: 2008-05-09T18:00:00.000Z Updated: 2024-08-07T08:49:58.517Z Open on db.gcve.eu Reference links http://secunia.com/advisories/30061 http://www.mrzayas.es/2008/05/04/multiples-vulnerabilidades-en-nuket-3x/ http://www.securityfocus.com/bid/29080 https://exchange.xforce.ibmcloud.com/vulnerabilities/42239 http://truzone.org/modules.php?name=Forums&file=viewtopic&p=332746	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-2133`	vulnerable	2026-06-08 04:50:23.028369	Details available Cross-site scripting (XSS) vulnerability in the Journal module in Tru-Zone Nuke ET 3.x allows remote attackers to inject arbitrary web script or HTML via the title parameter in a new entry, as demonstrated by a CSS property in the STYLE attribute of a DIV element, a different vulnerability than CVE-2008-1873. Published: 2008-05-09T18:00:00.000Z Updated: 2024-08-07T08:49:58.489Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/42238 http://secunia.com/advisories/30061 http://www.mrzayas.es/2008/05/04/multiples-vulnerabilidades-en-nuket-3x/ http://truzone.org/modules.php?name=Forums&file=viewtopic&t=55141 http://www.securityfocus.com/bid/29080	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-1873`	vulnerable	2026-06-08 04:50:22.142734	Details available Cross-site scripting (XSS) vulnerability in the private message feature in Nuke ET 3.2 and 3.4, when using Internet Explorer, allows remote authenticated users to inject arbitrary web script or HTML via a CSS property in the STYLE attribute of a DIV element in the mensaje parameter. NOTE: some of these details are obtained from third party information. Published: 2008-04-17T17:00:00.000Z Updated: 2024-08-07T08:40:59.130Z Open on db.gcve.eu Reference links http://secunia.com/advisories/29651 http://mrzayas.es/wp-content/poc/nukeet.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/41646 http://www.mrzayas.es/2008/04/04/xploitnukeet3/ http://www.securityfocus.com/bid/28614	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3748`	vulnerable	2026-06-08 04:48:42.087313	Details available SQL injection vulnerability in the Search module in Tru-Zone Nuke ET 3.2, and possibly earlier versions, allows remote attackers to execute arbitrary SQL commands via the query parameter. Published: 2005-11-22T11:00:00.000Z Updated: 2024-08-07T23:24:35.491Z Open on db.gcve.eu Reference links http://www.osvdb.org/21002 http://www.vupen.com/english/advisories/2005/2516 http://www.securityfocus.com/bid/15519 http://secunia.com/advisories/17638 http://lostmon.blogspot.com/2005/11/nuke-et-search-module-query-variable.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Nukeet

Notes

PURL mappings

Vulnerability references

Contribute