Approved changes feed: RSS · Atom
cpe:2.3:a:francisco_burzi:php-nuke:8.0_final:*:*:*:*:*:*:*
part: a version: 8.0_final update: *
| Vendor | Francisco Burzi (68a17156-e3a7-5e29-9915-44b46e54976e) |
|---|---|
| Product | Php Nuke (ef4ae9c3-13ee-5006-91f7-f834bb9c94f4) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/phpnuke/phpnuke |
purl2cpe | 2026-06-01 10:16:39.173641 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2007-6376 |
vulnerable | 2026-06-08 04:50:08.671101 |
Details available
Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the filename parameter, a different vector than CVE-2006-4190. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.
Published: 2007-12-15T01:00:00.000Z
Updated: 2024-08-07T16:02:36.371Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1914 |
vulnerable | 2026-06-08 04:48:08.025949 |
Details available
SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execute arbitrary SQL commands via the eid parameter.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:49.064Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1913 |
vulnerable | 2026-06-08 04:48:08.025649 |
Details available
Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to inject arbitrary web script or HTML via the eid parameter.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:49.111Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1912 |
vulnerable | 2026-06-08 04:48:08.024435 |
Details available
The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCalendar 1.1.a, as used in PHP-Nuke, allow remote attackers to obtain sensitive information via a URL with an invalid argument, which reveals the full path in an error message.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:49.080Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0738 |
vulnerable | 2026-06-08 04:47:51.058844 |
Details available
Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote attackers to execute arbitrary SQL via the (1) min or (2) categ parameters.
Published: 2004-07-23T04:00:00.000Z
Updated: 2024-08-08T00:31:46.535Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0737 |
vulnerable | 2026-06-08 04:47:51.058569 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0736 |
vulnerable | 2026-06-08 04:47:51.058281 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0732 |
vulnerable | 2026-06-08 04:47:51.047124 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-0731 |
vulnerable | 2026-06-08 04:47:51.046744 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-1522 |
vulnerable | 2026-06-08 04:46:20.212402 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2001-0321 |
vulnerable | 2026-06-08 04:45:20.040972 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.