Filtered by vendor Php-nuke Subscriptions
Total 24 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2008-0907 1 Php-nuke 1 Inhalt Module 2017-09-29 N/A
SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter.
CVE-2008-0906 1 Php-nuke 1 Php-nuke Module Docum 2017-09-29 N/A
SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle operation.
CVE-2008-3573 2 Php-nuke, Pligg 2 Php-nuke, Pligg 2017-08-08 N/A
The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the URL in the SRC attribute of an IMG element, which allows remote attackers to pass the CAPTCHA test via a calculation that combines this value with the current date and the HTTP User-Agent string.
CVE-2006-0185 1 Php-nuke 2 News Module, Pool Module 2011-03-08 N/A
Multiple cross-site scripting vulnerabilities in the (1) Pool or (2) News Modules in Php-Nuke allow remote attackers to inject arbitrary web script or HTML via javascript in the SRC attribute of an IMG tag.