Approved changes feed: RSS · Atom

cpe:2.3:a:francisco_burzi:php-nuke:1.0:*:*:*:*:*:*:*

part: a version: 1.0 update: *

VendorFrancisco Burzi (68a17156-e3a7-5e29-9915-44b46e54976e)
ProductPhp Nuke (ef4ae9c3-13ee-5006-91f7-f834bb9c94f4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/phpnuke/phpnuke purl2cpe 2026-06-01 10:16:39.136785

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2004-0269 vulnerable 2026-06-08 04:47:49.254535 Details available
SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category variable in the Search module or (2) the admin variable in the Web_Links module.
Published: 2004-03-18T05:00:00.000Z
Updated: 2024-08-08T00:10:03.855Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-2032 vulnerable 2026-06-08 04:47:18.933448 Details available
sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote attackers to gain SQL query information by setting the sql_debug parameter to (1) index.php and (2) modules.php.
Published: 2005-07-14T04:00:00.000Z
Updated: 2024-09-16T17:03:01.950Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2002-0206 vulnerable 2026-06-08 04:46:20.903916 Details available
index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote attackers to execute arbitrary PHP code by specifying a URL to the malicious code in the file parameter.
Published: 2002-05-03T04:00:00.000Z
Updated: 2024-08-08T02:42:27.910Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2000-0745 vulnerable 2026-06-08 04:45:18.711088 Details available
admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd parameter.
Published: 2000-10-13T04:00:00.000Z
Updated: 2024-08-08T05:28:41.484Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.