GCVE - cpe:2.3:a:nuked-klan:nuked-klan:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nuked-klan:nuked-klan:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Nuked Klan (`6aa2cad4-264c-5cb8-a30d-d1ea7cbd0e62`)
Product	Nuked Klan (`51a3a0fd-bdcf-5581-8e9f-54779e226bed`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/nuked-klan/cms_nuked-klan`	purl2cpe	2026-06-01 10:13:09.259414
`pkg:sourceforge/nukedklan`	purl2cpe	2026-06-01 10:13:09.259416

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-4925`	not_vulnerable	2026-06-08 04:56:31.424740	Details available SQL injection vulnerability in clic.php in the Partenaires module 1.5 for Nuked-Klan allows remote attackers to execute arbitrary SQL commands via the id parameter. Published: 2011-10-09T10:00:00.000Z Updated: 2024-08-07T04:02:30.500Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/8459 http://secunia.com/advisories/40887 http://osvdb.org/66927 http://packetstormsecurity.org/1008-exploits/nukedklanpartenaires-sql.txt http://www.exploit-db.com/exploits/14556	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-3479`	vulnerable	2026-06-08 04:49:09.481225	Details available Cross-site request forgery (CSRF) vulnerability in the del_block function in modules/Admin/block.php in Nuked-Klan 1.7.5 and earlier and 1.7 SP4.2 allows remote attackers to delete arbitrary "blocks" via a link with a modified bid parameter in a del_block op on the block page in index.php. Published: 2006-07-10T20:00:00.000Z Updated: 2024-08-07T18:30:33.808Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/438703 http://securityreason.com/securityalert/1205 http://secunia.com/advisories/20898 https://exchange.xforce.ibmcloud.com/vulnerabilities/27490 http://www.vupen.com/english/advisories/2006/2615	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1419`	vulnerable	2026-06-08 04:48:57.160920	Details available SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php. Published: 2006-03-28T20:00:00.000Z Updated: 2024-08-07T17:12:21.383Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/1134 http://securityreason.com/securityalert/632 http://secunia.com/advisories/19382 http://www.securityfocus.com/archive/1/428895/100/0/threaded http://www.osvdb.org/24204	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.