Approved changes feed: RSS · Atom

cpe:2.3:a:nukeviet:nukeviet:4.4:*:*:*:*:*:*:*

part: a version: 4.4 update: *

VendorNukeviet (deafe795-accb-5cbd-ba50-0b5ab2c9742b)
ProductNukeviet (ca2d0760-cfbf-5a7f-8906-f3bb258c250e)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/nukeviet/nukeviet purl2cpe 2026-06-01 10:12:02.874724
pkg:sourceforge/nukevietcms purl2cpe 2026-06-01 10:12:02.874726

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-13157 vulnerable 2026-06-08 05:18:00.256860 Details available
modules\users\admin\edit.php in NukeViet 4.4 allows CSRF to change a user's password via an admin/index.php?nv=users&op=edit&userid= URI. The old password is not needed.
Published: 2020-06-23T19:11:54.000Z
Updated: 2024-08-04T12:11:19.366Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13156 vulnerable 2026-06-08 05:18:00.256539 Details available
modules\users\admin\add_user.php in NukeViet 4.4 allows CSRF to add a user account via the admin/index.php?nv=users&op=user_add URI.
Published: 2020-06-23T19:14:04.000Z
Updated: 2024-08-04T12:11:19.469Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-13155 vulnerable 2026-06-08 05:18:00.256030 Details available
clearsystem.php in NukeViet 4.4 allows CSRF with resultant HTML injection via the deltype parameter to the admin/index.php?nv=webtools&op=clearsystem URI.
Published: 2020-06-23T19:15:11.000Z
Updated: 2024-08-04T12:11:19.199Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.