Php Nuke
Vendor:
First CVE: Oct 20, 2000 · Active for 25 years
94
Total CVEs
More Total CVEs than 99% of tracked products
10.4
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
6.0
Avg CVSS
Higher Avg CVSS than 24% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Php Nuke over time
Volume of CVEsAvg CVSS Base Score
First CVE
Oct 20, 2000
25 years ago
Most Recent CVE
Jan 25, 2008
6,759 days ago
CVE Severity & Scoring
Php Nuke94 CVEs
57%
41%
All CVEs353,173 CVEs
45%
40%
11%
LowMediumHigh
Attack Vector
Local0 (0.0%)
Network0 (0.0%)
Unknown94 (100.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low0 (0.0%)
High0 (0.0%)
Unknown94 (100.0%)
User Interaction
None0 (0.0%)
Unknown94 (100.0%)
Required0 (0.0%)
Privileges Required
Low0 (0.0%)
High0 (0.0%)
None0 (0.0%)
Unknown94 (100.0%)
Top CVEs
Signals from CVEs in this product scope (94 CVEs).
94 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2007-1061MEDIUM SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allows remote attackers to execute arbitrary | Feb 22, 2007 | 6.8 | 60 | NO | YES |
CVE-2005-3792HIGH Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions before 7.9 with patch 3.1, allows remote attackers to execute arbitrary SQL | Nov 24, 2005 | 7.5 | 52 | NO | YES |
CVE-2004-2044HIGH PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi() PHP f | Jun 1, 2004 | 7.5 | 39 | NO | YES |
CVE-2004-1988HIGH PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to re | Apr 30, 2004 | 7.5 | 39 | NO | YES |
CVE-2004-2018HIGH PHP remote file inclusion vulnerability in index.php in Php-Nuke 6.x through 7.3 allows remote attackers to execute arbitrary PHP code by modifying the modpath parameter to referen | Dec 31, 2004 | 7.5 | 37 | NO | YES |
CVE-2003-1210HIGH Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to th | Dec 31, 2003 | 7.5 | 36 | NO | YES |
CVE-2004-0269MEDIUM SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive information via (1) the category | Nov 23, 2004 | 6.4 | 35 | NO | YES |
CVE-2004-1914HIGH SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execute arbitrary SQL commands via the eid parameter. | Dec 31, 2004 | 7.5 | 34 | NO | YES |
CVE-2004-0265MEDIUM Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to execute arbitrary script as other users via URL-encoded (1) title or (2) f | Nov 23, 2004 | 6.8 | 34 | NO | YES |
CVE-2003-1435HIGH SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search module. | Dec 31, 2003 | 7.5 | 34 | NO | YES |
Exploit Exposure
Signals from CVEs in this product scope (94 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
48 CVEs
51.1% of CVEs· 91st percentile
Social Chatter
Signals from CVEs in this product scope (94 CVEs).
Media Mentions
Signals from CVEs in this product scope (94 CVEs).
Top CNAs Publishing CVEs For Php Nuke
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 8.0_final | 11 | 6.2 | 2.0% | 0 | 4 |
| 7.9 | 5 | 6.2 | 2.9% | 0 | 3 |
| 7.8_patched_3.2 | 2 | 7.5 | 2.6% | 0 | 0 |
| 7.8 | 11 | 6.6 | 6.4% | 0 | 6 |
| 7.7 | 7 | 6.9 | 8.3% | 0 | 5 |
| 7.6 | 20 | 5.8 | 4.0% | 0 | 10 |
| 7.5 | 9 | 6.5 | 2.3% | 0 | 5 |
| 7.4 | 9 | 6.5 | 2.3% | 0 | 5 |
| 7.3 | 22 | 5.8 | 4.5% | 0 | 13 |
| 7.2 | 34 | 5.9 | 4.7% | 0 | 21 |
| 7.1 | 36 | 5.8 | 4.6% | 0 | 23 |
| 7.0_final | 31 | 5.7 | 5.0% | 0 | 19 |
| 7.0 | 37 | 5.7 | 3.3% | 0 | 21 |
| 6.9 | 35 | 5.7 | 3.5% | 0 | 20 |
| 6.8 | 3 | 6.4 | 1.4% | 0 | 0 |
| 6.7 | 29 | 5.6 | 2.7% | 0 | 16 |
| 6.6 | 29 | 5.6 | 2.7% | 0 | 16 |
| 6.5_rc3 | 29 | 5.5 | 2.9% | 0 | 18 |
| 6.5_rc2 | 29 | 5.5 | 2.9% | 0 | 18 |
| 6.5_rc1 | 29 | 5.5 | 2.9% | 0 | 18 |