Approved changes feed: RSS · Atom

cpe:2.3:a:francisco_burzi:php-nuke:6.8:*:*:*:*:*:*:*

part: a version: 6.8 update: *

VendorFrancisco Burzi (68a17156-e3a7-5e29-9915-44b46e54976e)
ProductPhp Nuke (ef4ae9c3-13ee-5006-91f7-f834bb9c94f4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/phpnuke/phpnuke purl2cpe 2026-06-01 10:16:39.160632

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2005-3016 vulnerable 2026-06-08 04:48:31.168133 Details available
Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact and attack vectors.
Published: 2005-09-21T04:00:00.000Z
Updated: 2024-09-16T17:38:06.709Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1999 vulnerable 2026-06-08 04:48:08.223226 Details available
Cross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to inject arbitrary HTML and web script via the (1) ttitle or (2) sid parameters to modules.php.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:15:01.498Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2004-1998 vulnerable 2026-06-08 04:48:08.222651 Details available
The Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive information via an invalid show parameter to modules.php, which reveals the full path in a PHP error message.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:15:01.477Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.