Skip to content

Francisco Burzi Php-nuke vulnerabilities

francisco burzi php-nukeCross-site scripting (XSS) vulnerability in index.php in the Search module for Php-Nuke allows...CVE-2004-07316.8 MediumJuly 23, 2004
francisco burzi php-nuke, oscommerce osc2nuke, paul laudanski betanc php-nuke +1 more +3 morePHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP...CVE-2004-2044Public exploitEPSS 11.0%7.5 HighJune 1, 2004
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2...CVE-2004-19994.3 MediumMay 5, 2004
francisco burzi php-nukeThe Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive...CVE-2004-19985.0 MediumMay 5, 2004
coppermine photo gallery, francisco burzi php-nuke +1 moreCoppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive...CVE-2004-19845.0 MediumMay 2, 2004
coppermine photo gallery, francisco burzi php-nuke +1 morePHP remote file inclusion vulnerability in theme.php in Coppermine Photo Gallery 1.2.2b allows...CVE-2004-1989Public exploit7.5 HighApril 30, 2004
coppermine photo gallery, francisco burzi php-nuke +1 morePHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4...CVE-2004-1988Public exploit7.5 HighApril 30, 2004
coppermine photo gallery, francisco burzi php-nuke +1 morepicmgmtbatch.inc.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers...CVE-2004-1987EPSS 10.2%7.5 HighApril 30, 2004
coppermine photo gallery, francisco burzi php-nuke +1 moreCross-site scripting (XSS) vulnerability in menu.inc.php in Coppermine Photo Gallery 1.2.2b...CVE-2004-1985Public exploit4.3 MediumApril 30, 2004
francisco burzi php-nukeSQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows...CVE-2004-1972Public exploit7.5 HighApril 26, 2004
francisco burzi php-nukeSQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2...CVE-2004-1929Public exploit7.5 HighApril 13, 2004
francisco burzi php-nukeSQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows...CVE-2004-1932Public exploit7.5 HighApril 12, 2004
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP...CVE-2004-1930Public exploit4.3 MediumApril 12, 2004
coppermine photo gallery, francisco burzi php-nuke +1 moreDirectory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4...CVE-2004-1986Public exploitEPSS 10.6%5.0 MediumApril 4, 2004
francisco burzi php-nukeMultiple cross-site scripting (XSS) vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows...CVE-2004-18404.3 MediumMarch 22, 2004
francisco burzi php-nukeMS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a...CVE-2004-18395.0 MediumMarch 22, 2004
francisco burzi php-nukeerror.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive...CVE-2004-1830Public exploit5.0 MediumMarch 18, 2004
francisco burzi php-nukeSQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote...CVE-2004-0269Public exploit6.4 MediumMarch 18, 2004
francisco burzi php-nukeSQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x...CVE-2004-0266Public exploit5.0 MediumMarch 18, 2004
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote...CVE-2004-0265Public exploit6.8 MediumMarch 18, 2004
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in modules.php in Php-Nuke 7.1.0 allows remote attackers...CVE-2004-1817Public exploit4.3 MediumMarch 15, 2004
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in block-Forums.php in the Splatt Forum module for PHP...CVE-2003-15474.3 MediumDecember 31, 2003
francisco burzi php-nukePHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such...CVE-2003-15265.0 MediumDecember 31, 2003
francisco burzi php-nukeThe Web_Links module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full...CVE-2003-1468Public exploit4.3 MediumDecember 31, 2003
francisco burzi php-nukeSQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary...CVE-2003-1435Public exploit7.5 HighDecember 31, 2003
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in the Your_Account module for PHP-Nuke 5.0 through 6.0...CVE-2003-1400Public exploit4.3 MediumDecember 31, 2003
francisco burzi php-nukeMultiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow...CVE-2003-1210Public exploit7.5 HighDecember 31, 2003
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier...CVE-2003-03184.3 MediumMay 22, 2003
francisco burzi php-nukeMultiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5...CVE-2003-02792.6 LowMay 14, 2003
francisco burzi php-nukesql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which...CVE-2002-2032Public exploit5.0 MediumDecember 31, 2002
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote attackers to inject...CVE-2002-1803Public exploit4.3 MediumDecember 31, 2002
francisco burzi php-nukeSQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify...CVE-2002-1242Public exploit7.5 HighNovember 12, 2002
francisco burzi php-nukeindex.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname...CVE-2002-0483Public exploit5.0 MediumJune 11, 2002
francisco burzi php-nukeindex.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5,...CVE-2002-0206Public exploit7.5 HighMay 3, 2002
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to...CVE-2001-1524Public exploit4.3 MediumDecember 31, 2001
francisco burzi php-nukeCross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote...CVE-2001-15224.3 MediumDecember 31, 2001
francisco burzi php-nukePHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case...CVE-2001-08545.0 MediumNovember 22, 2001
francisco burzi php-nuke, postnuke software foundation postnuke +1 morePHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could...CVE-2001-09117.5 HighNovember 21, 2001
francisco burzi php-nukeadmin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload...CVE-2001-10327.5 HighSeptember 24, 2001
francisco burzi php-nukePHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix...CVE-2001-102510.0 HighAugust 31, 2001
francisco burzi php-nukebanners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by...CVE-2001-0383Public exploit5.0 MediumJune 18, 2001
francisco burzi php-nukecookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to...CVE-2001-00017.5 HighJune 2, 2001
francisco burzi php-nukeopendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the...CVE-2001-03215.0 MediumMay 3, 2001
francisco burzi php-nukebb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files...CVE-2001-032010.0 HighApril 4, 2001
francisco burzi php-nukePHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password...CVE-2001-02927.5 HighApril 4, 2001
francisco burzi php-nukeadmin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows...CVE-2000-0745Public exploitEPSS 12.1%7.5 HighOctober 13, 2000