asp-nuke vulnerabilities and fixes

Recent CVEs affecting asp-nuke, with upgrade or downgrade steps. 13 tracked.

Also searched as: asp nuke.

asp-nuke has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-05-30. Highest priority: CVE-2006-7152 (score 56/100).

• CVE-2007-2892 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbit
• CVE-2006-7152 HIGH 8.5 DOWNGRADE default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certai
• CVE-2006-6070 HIGH 7.5 UPGRADE SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote
• CVE-2005-2067 HIGH 7.5 MITIGATE SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute a
• CVE-2005-2066 HIGH 7.5 DOWNGRADE SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary
• CVE-2005-2065 MEDIUM 5.0 DOWNGRADE HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof
• CVE-2005-2064 MEDIUM 5.0 DOWNGRADE Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web
• CVE-2004-1788 MEDIUM 5.0 DOWNGRADE ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control,
• CVE-2002-0524 MEDIUM 5.0 DOWNGRADE ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling d
• CVE-2002-0523 MEDIUM 5.0 DOWNGRADE ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo"
• CVE-2002-0522 HIGH 7.5 DOWNGRADE ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the
• CVE-2002-0521 MEDIUM 5.1 DOWNGRADE Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or g
• CVE-2002-0520 HIGH 7.5 DOWNGRADE Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute sc

FAQ

How do I fix asp-nuke vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is asp-nuke being exploited right now?

None of the tracked asp-nuke CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which asp-nuke CVE should I patch first?

CVE-2006-7152 currently ranks highest (56/100): default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certai.

RSS feed for asp-nuke · ← Back to latest CVEs