Approved changes feed: RSS · Atom
cpe:2.3:a:phpnuke:php-nuke:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Phpnuke (17bc01fb-d507-5bec-aab1-228a9db5d380) |
|---|---|
| Product | Php Nuke (e8cbb970-fa0e-534a-9c75-ef9b208d54b6) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:bitbucket/phpnuke/phpnuke |
purl2cpe | 2026-06-01 10:15:05.439572 |
pkg:github/phpnuke/phpnuke |
purl2cpe | 2026-06-01 10:15:05.439576 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2011-1482 |
vulnerable | 2026-06-08 04:57:59.490307 |
Details available
Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that (1) add user accounts or (2) grant the administrative privilege to a user account, related to a Referer check that uses a substring comparison.
Published: 2011-06-21T01:00:00.000Z
Updated: 2024-09-16T20:47:40.110Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1481 |
vulnerable | 2026-06-08 04:57:59.489384 |
Details available
Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sender_name or (2) sender_email parameter in a Feedback action to modules.php.
Published: 2011-06-21T01:00:00.000Z
Updated: 2024-09-16T23:51:16.046Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2011-1480 |
vulnerable | 2026-06-08 04:57:59.471945 |
Details available
SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the chng_uid parameter.
Published: 2011-06-21T01:00:00.000Z
Updated: 2024-09-17T02:36:14.995Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7226 |
not_vulnerable | 2026-06-08 04:51:06.027592 |
Details available
SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the recipeid parameter.
Published: 2009-09-14T14:00:00.000Z
Updated: 2024-08-07T11:56:14.534Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-7038 |
not_vulnerable | 2026-06-08 04:51:05.487625 |
Details available
SQL injection vulnerability in the My_eGallery module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the gid parameter in a showgall action to modules.php. NOTE: this issue was disclosed by an unreliable researcher, so the details might be incorrect.
Published: 2009-08-24T10:00:00.000Z
Updated: 2024-08-07T11:49:02.997Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6865 |
not_vulnerable | 2026-06-08 04:51:05.038525 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6779 |
not_vulnerable | 2026-06-08 04:51:04.813367 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6728 |
vulnerable | 2026-06-08 04:51:04.679661 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5039 |
not_vulnerable | 2026-06-08 04:50:49.207687 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4804 |
not_vulnerable | 2026-06-08 04:50:48.333409 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-4767 |
not_vulnerable | 2026-06-08 04:50:48.097914 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1314 |
not_vulnerable | 2026-06-08 04:50:19.918250 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-1308 |
not_vulnerable | 2026-06-08 04:50:19.906824 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1520 |
vulnerable | 2026-06-08 04:49:42.795167 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-1519 |
vulnerable | 2026-06-08 04:49:42.794659 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2006-5525 |
vulnerable | 2026-06-08 04:49:20.698496 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2005-1028 |
vulnerable | 2026-06-08 04:48:25.134041 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1842 |
vulnerable | 2026-06-08 04:48:07.831642 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0899 |
vulnerable | 2026-06-08 04:45:21.059277 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.