PatchTheCVEasp-nuke vulnerabilities
Recent CVEs affecting asp-nuke products. 13 tracked.
asp-nuke has 13 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 1. Most recent: 2007-05-30. Highest priority: CVE-2006-7152 (score 56/100).
- CVE-2007-2892 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbit
- CVE-2006-7152 HIGH 8.5 DOWNGRADE default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certai
- CVE-2006-6070 HIGH 7.5 UPGRADE SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote
- CVE-2005-2067 HIGH 7.5 MITIGATE SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute a
- CVE-2005-2066 HIGH 7.5 DOWNGRADE SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary
- CVE-2005-2065 MEDIUM 5.0 DOWNGRADE HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof
- CVE-2005-2064 MEDIUM 5.0 DOWNGRADE Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web
- CVE-2004-1788 MEDIUM 5.0 DOWNGRADE ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control,
- CVE-2002-0524 MEDIUM 5.0 DOWNGRADE ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling d
- CVE-2002-0523 MEDIUM 5.0 DOWNGRADE ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo"
- CVE-2002-0522 HIGH 7.5 DOWNGRADE ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the
- CVE-2002-0521 MEDIUM 5.1 DOWNGRADE Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or g
- CVE-2002-0520 HIGH 7.5 DOWNGRADE Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute sc
FAQ
How do I fix asp-nuke vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is asp-nuke being exploited right now?
None of the tracked asp-nuke CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which asp-nuke CVE should I patch first?
CVE-2006-7152 currently ranks highest (56/100): default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certai.