GCVE - cpe:2.3:a:myphpnuke:myphpnuke:1.8.8_7:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:myphpnuke:myphpnuke:1.8.8_7:*:*:*:*:*:*:*

part: a version: 1.8.8_7 update: *

Vendor	Myphpnuke (`a1d2df92-cfd4-5edd-a6e0-860079ab8ea1`)
Product	Myphpnuke (`83dd5f17-8120-5810-9b08-05a981b788ee`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2008-4092`	vulnerable	2026-06-08 04:50:37.733722	Details available SQL injection vulnerability in printfeature.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the artid parameter. Published: 2008-09-15T16:00:00.000Z Updated: 2024-08-07T10:00:42.518Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/4261 http://www.vupen.com/english/advisories/2008/2469 https://exchange.xforce.ibmcloud.com/vulnerabilities/44798 https://www.exploit-db.com/exploits/6347 http://websecurity.com.ua/2398/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4089`	vulnerable	2026-06-08 04:50:37.730841	Details available Cross-site scripting (XSS) vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to inject arbitrary web script or HTML via the sid parameter. Published: 2008-09-15T16:00:00.000Z Updated: 2024-08-07T10:00:42.815Z Open on db.gcve.eu Reference links http://www.securityfocus.com/bid/31112 https://www.exploit-db.com/exploits/6338 http://www.securityfocus.com/bid/31114 http://www.securityfocus.com/bid/30942	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-4088`	vulnerable	2026-06-08 04:50:37.728348	Details available SQL injection vulnerability in print.php in myPHPNuke (MPN) before 1.8.8_8rc2 allows remote attackers to execute arbitrary SQL commands via the sid parameter. Published: 2008-09-15T16:00:00.000Z Updated: 2024-08-07T10:00:42.844Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/45084 http://www.securityfocus.com/bid/31112 http://securityreason.com/securityalert/4255 https://www.exploit-db.com/exploits/6338 http://www.securityfocus.com/bid/31114	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2006-0923`	vulnerable	2026-06-08 04:48:55.800532	Details available Multiple cross-site scripting (XSS) vulnerabilities in MyPHPNuke (MPN) 1.88 and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the letter parameter in reviews.php and (2) the dcategory parameter in download.php. Published: 2006-02-28T11:00:00.000Z Updated: 2024-08-07T16:56:15.522Z Open on db.gcve.eu Reference links http://securityreason.com/securityalert/491 http://www.nukedx.com/?viewdoc=12 https://exchange.xforce.ibmcloud.com/vulnerabilities/24887 http://secunia.com/advisories/19052 http://www.securityfocus.com/bid/16815	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.