GCVE - cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:francisco_burzi:php-nuke:7.8:*:*:*:*:*:*:*

part: a version: 7.8 update: *

Vendor	Francisco Burzi (`68a17156-e3a7-5e29-9915-44b46e54976e`)
Product	Php Nuke (`ef4ae9c3-13ee-5006-91f7-f834bb9c94f4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:github/phpnuke/phpnuke`	purl2cpe	2026-06-01 10:16:39.170671

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2006-6200`	vulnerable	2026-06-08 04:49:22.267652	Details available Multiple SQL injection vulnerabilities in the (1) rate_article and (2) rate_complete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magic_quotes_gpc is disabled, allow remote attackers to execute arbitrary SQL commands via the sid parameter. Published: 2006-12-01T01:00:00.000Z Updated: 2024-08-07T20:19:34.939Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/21277 http://www.neosecurityteam.net/index.php?action=advisories&id=30 http://securityreason.com/securityalert/1935 https://exchange.xforce.ibmcloud.com/vulnerabilities/30525 http://secunia.com/advisories/23128	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-5720`	vulnerable	2026-06-08 04:49:21.126484	Details available SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.9 and earlier allows remote attackers to execute arbitrary SQL commands via the forwhat parameter. Published: 2006-11-04T01:00:00.000Z Updated: 2024-08-07T20:04:54.280Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/450183/100/0/threaded http://secunia.com/advisories/22617 http://securityreason.com/securityalert/1812 http://www.neosecurityteam.net/index.php?action=advisories&id=29 http://www.vupen.com/english/advisories/2006/4295	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1847`	vulnerable	2026-06-08 04:48:58.212203	Details available SQL injection vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to execute arbitrary SQL commands via the user_id parameter in the Your_Home functionality. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Published: 2006-04-19T16:00:00.000Z Updated: 2024-08-07T17:27:29.419Z Open on db.gcve.eu Reference links http://secunia.com/advisories/18972 http://www.vupen.com/english/advisories/2006/0687 http://www.securityfocus.com/bid/16774 https://exchange.xforce.ibmcloud.com/vulnerabilities/44730 http://www.osvdb.org/23432	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-1846`	vulnerable	2026-06-08 04:48:58.211910	Details available Cross-site scripting (XSS) vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to inject arbitrary HTML and web script via the ublock parameter, which is saved in the user's personal menu. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. In addition, it is unclear whether this issue is a vulnerability, since it is related to the user's personal menu, which presumably is not modifiable by others. Published: 2006-04-19T16:00:00.000Z Updated: 2024-08-07T17:27:29.476Z Open on db.gcve.eu Reference links http://secunia.com/advisories/18972 http://www.vupen.com/english/advisories/2006/0687 http://www.osvdb.org/23431 http://www.securityfocus.com/bid/16774	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0907`	vulnerable	2026-06-08 04:48:55.746867	Details available SQL injection vulnerability in PHP-Nuke before 7.8 Patched 3.2 allows remote attackers to execute arbitrary SQL commands via encoded /%2a (/*) sequences in the query string, which bypasses regular expressions that are intended to protect against SQL injection, as demonstrated via the kala parameter. Published: 2006-02-28T02:00:00.000Z Updated: 2024-08-07T16:48:56.619Z Open on db.gcve.eu Reference links http://www.securityfocus.com/archive/1/426083/100/0/threaded http://www.waraxe.us/advisory-47.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0805`	vulnerable	2026-06-08 04:48:55.401561	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0676`	vulnerable	2026-06-08 04:48:54.863942	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4715`	vulnerable	2026-06-08 04:48:44.848779	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-4260`	vulnerable	2026-06-08 04:48:43.463393	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3792`	vulnerable	2026-06-08 04:48:42.184134	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2005-3304`	vulnerable	2026-06-08 04:48:40.292778	db.gcve.eu details were skipped to keep the page responsive. Open on db.gcve.eu	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.