GCVE - cpe:2.3:a:nuked-klan:nuked-klan:1.2:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:nuked-klan:nuked-klan:1.2:*:*:*:*:*:*:*

part: a version: 1.2 update: *

Vendor	Nuked Klan (`6aa2cad4-264c-5cb8-a30d-d1ea7cbd0e62`)
Product	Nuked Klan (`51a3a0fd-bdcf-5581-8e9f-54779e226bed`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/nuked-klan/cms_nuked-klan`	purl2cpe	2026-06-01 10:13:09.260601
`pkg:sourceforge/nukedklan`	purl2cpe	2026-06-01 10:13:09.260603

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2007-0083`	vulnerable	2026-06-08 04:49:31.414938	Details available Cross-site scripting (XSS) vulnerability in Nuked Klan 1.7 and earlier allows remote attackers to inject arbitrary web script or HTML via a javascript: URI in a getURL statement in a .swf file, as demonstrated by "Remote Cookie Disclosure." NOTE: it could be argued that this is an issue in Shockwave instead of Nuked Klan. Published: 2007-01-05T11:00:00.000Z Updated: 2024-08-07T12:03:37.004Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/21850 http://securityreason.com/securityalert/2101 http://osvdb.org/33368 http://www.securityfocus.com/archive/1/455726/100/0/threaded	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1419`	vulnerable	2026-06-08 04:48:57.161488	Details available SQL injection vulnerability in the Calendar module in nuked-klan 1.7.5 and earlier allows remote attackers to execute arbitrary SQL commands via the m parameter to index.php. Published: 2006-03-28T20:00:00.000Z Updated: 2024-08-07T17:12:21.383Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2006/1134 http://securityreason.com/securityalert/632 http://secunia.com/advisories/19382 http://www.securityfocus.com/archive/1/428895/100/0/threaded http://www.osvdb.org/24204	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2004-1937`	vulnerable	2026-06-08 04:48:08.074666	Details available Multiple directory traversal vulnerabilities in Nuked-KlaN 1.4b and 1.5b allow remote attackers to read or include arbitrary files via .. sequences in (1) the user_langue parameter to index.php or (2) the langue parameter to update.php, or modify arbitrary GLOBAL variables by causing globals.php to be loaded before conf.inc.php via (3) .. sequences in the file parameter with the page parameter set to globals, or (4) ../globals.php in the user_langue parameter, as demonstrated by modifying $nuked[prefix] in the Suggest module. Published: 2005-05-10T04:00:00.000Z Updated: 2024-08-08T01:07:49.136Z Open on db.gcve.eu Reference links http://marc.info/?l=bugtraq&m=108222826225823&w=2 https://exchange.xforce.ibmcloud.com/vulnerabilities/15843 http://www.phpsecure.info/v2/tutos/frog/Nuked-KlaN.txt https://exchange.xforce.ibmcloud.com/vulnerabilities/15844 http://secunia.com/advisories/11341	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2003-1238`	vulnerable	2026-06-08 04:47:23.766454	Details available Cross-site scripting vulnerability (XSS) in Nuked-Klan 1.3 beta and earlier allows remote attackers to steal authentication information via cookies by injecting arbitrary HTML or script into op of the (1) Team, (2) News, and (3) Liens modules. Published: 2005-11-16T07:37:00.000Z Updated: 2024-09-16T18:28:47.486Z Open on db.gcve.eu Reference links http://www.iss.net/security_center/static/11420.php http://archives.neohapsis.com/archives/bugtraq/2003-03/0275.html http://archives.neohapsis.com/archives/bugtraq/2003-02/0276.html http://www.securityfocus.com/bid/6916	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.