https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2007-2892.htmlhttps://patchthecve.com/cve/CVE-2007-2892.htmlTue, 16 Jun 2026 22:40:39 +0000MEDIUM 4.3: Cross-site scripting (XSS) vulnerability in news.asp in ASP-Nuke 2.0.7 allows remote attackers to inject arbitrary web script or HTML via the id parameter. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.https://patchthecve.com/cve/CVE-2006-7152.htmlhttps://patchthecve.com/cve/CVE-2006-7152.htmlTue, 16 Jun 2026 22:34:28 +0000HIGH 8.5: default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values.https://patchthecve.com/cve/CVE-2006-6070.htmlhttps://patchthecve.com/cve/CVE-2006-6070.htmlTue, 16 Jun 2026 22:32:24 +0000HIGH 7.5: SQL injection vulnerability in module/account/register/register.asp in ASP Nuke 0.80 and earlier allows remote attackers to execute arbitrary SQL commands via the StateCode parameter.https://patchthecve.com/cve/CVE-2005-2067.htmlhttps://patchthecve.com/cve/CVE-2005-2067.htmlTue, 16 Jun 2026 22:14:10 +0000HIGH 7.5: SQL injection vulnerability in article.asp in unknown versions of aspnuke allows remote attackers to execute arbitrary SQL commands via the articleid parameter.https://patchthecve.com/cve/CVE-2005-2066.htmlhttps://patchthecve.com/cve/CVE-2005-2066.htmlTue, 16 Jun 2026 22:14:10 +0000HIGH 7.5: SQL injection vulnerability in comment_post.asp in ASP Nuke 0.80 allows remote attackers to execute arbitrary SQL statements via the TaskID parameter.https://patchthecve.com/cve/CVE-2005-2065.htmlhttps://patchthecve.com/cve/CVE-2005-2065.htmlTue, 16 Jun 2026 22:14:10 +0000MEDIUM 5.0: HTTP response splitting vulnerability in language_select.asp in ASP Nuke 0.80 allows remote attackers to spoof web content and poison web caches via CRLF ("%0d%0a") sequences in the LangCode parameter.https://patchthecve.com/cve/CVE-2005-2064.htmlhttps://patchthecve.com/cve/CVE-2005-2064.htmlTue, 16 Jun 2026 22:14:10 +0000MEDIUM 5.0: Multiple cross-site scripting vulnerabilities in ASP Nuke 0.80 allow remote attackers to inject arbitrary web script or HTML via the (1) email parameter to forgot_password.asp, or the (2) FirstName, (3) LastName, (4) Username, (5) Password, (6) Address1, (7) Address2, (8) City, (9) ZipCode, (10) Emahttps://patchthecve.com/cve/CVE-2004-1788.htmlhttps://patchthecve.com/cve/CVE-2004-1788.htmlTue, 16 Jun 2026 22:08:24 +0000MEDIUM 5.0: ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb.https://patchthecve.com/cve/CVE-2002-0524.htmlhttps://patchthecve.com/cve/CVE-2002-0524.htmlTue, 16 Jun 2026 21:57:36 +0000MEDIUM 5.0: ASP-Nuke RC2 and earlier allows remote attackers to determine the absolute path of the server by (1) calling database-inc.asp with incorrect cookies, or (2) calling Post.asp with certain arguments, which leak the pathname in an error message.https://patchthecve.com/cve/CVE-2002-0523.htmlhttps://patchthecve.com/cve/CVE-2002-0523.htmlTue, 16 Jun 2026 21:57:36 +0000MEDIUM 5.0: ASP-Nuke RC2 and earlier allows remote attackers to list all logged-in users by submitting an invalid "pseudo" cookie.https://patchthecve.com/cve/CVE-2002-0522.htmlhttps://patchthecve.com/cve/CVE-2002-0522.htmlTue, 16 Jun 2026 21:57:36 +0000HIGH 7.5: ASP-Nuke RC2 and earlier allows remote attackers to bypass authentication and gain privileges by modifying the "pseudo" cookie.https://patchthecve.com/cve/CVE-2002-0521.htmlhttps://patchthecve.com/cve/CVE-2002-0521.htmlTue, 16 Jun 2026 21:57:36 +0000MEDIUM 5.1: Cross-site scripting vulnerabilities in ASP-Nuke RC2 and earlier allow remote attackers to execute script or gain privileges as other ASP-Nuke users via script in (1) the name parameter in downloads.asp, (2) the message parameter in Post.asp, or (3) a web site URL in profile.asp.https://patchthecve.com/cve/CVE-2002-0520.htmlhttps://patchthecve.com/cve/CVE-2002-0520.htmlTue, 16 Jun 2026 21:57:36 +0000HIGH 7.5: Cross-site scripting vulnerability in functions-inc.asp for ASP-Nuke RC1 allows remote attackers to execute script as other ASP-Nuke users by embedding it within an IMG tag.