Approved changes feed: RSS · Atom

cpe:2.3:a:nucleuscms:nucleus_cms:3.61:*:*:*:*:*:*:*

part: a version: 3.61 update: *

VendorNucleuscms (877d71cc-0c9d-5c20-a2b6-b996ec66f849)
ProductNucleus Cms (9ab51fc9-d001-5abb-9c6c-33ea8536823e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/nucleuscms/nucleuscms purl2cpe 2026-06-01 10:11:32.047129
pkg:sourceforge/nucleuscms purl2cpe 2026-06-01 10:11:32.047130

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2011-3760 vulnerable 2026-06-08 04:59:27.806636 Details available
Nucleus 3.61 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by xmlrpc/api_nucleus.inc.php and certain other files.
Published: 2011-09-24T00:00:00.000Z
Updated: 2024-08-06T23:46:02.869Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.