francisco burzi vulnerabilities

Recent CVEs affecting francisco burzi products. 93 tracked.

francisco burzi has 93 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 12. Most recent: 2008-01-25. Highest priority: CVE-2001-1025 (score 62/100).

• CVE-2008-0461 MEDIUM 6.8 UPGRADE SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_qu
• CVE-2007-6376 HIGH 7.5 DOWNGRADE Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to i
• CVE-2007-5032 MEDIUM 5.1 UPGRADE Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attacke
• CVE-2007-1061 MEDIUM 6.8 UPGRADE SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Ref
• CVE-2007-0372 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbit
• CVE-2007-0309 HIGH 7.5 UPGRADE SQL injection vulnerability in blocks/block-Old_Articles.php in Francisco Burzi PHP-Nuke 7.9 and earlier, when
• CVE-2006-6234 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, all
• CVE-2006-6200 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in the (1) rate_article and (2) rate_complete functions in modules/News
• CVE-2006-5720 HIGH 7.5 UPGRADE SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.
• CVE-2006-1847 HIGH 7.5 DOWNGRADE SQL injection vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to execut
• CVE-2006-1846 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attack
• CVE-2006-0908 HIGH 7.5 DOWNGRADE PHP-Nuke 7.8 Patched 3.2 allows remote attackers to bypass SQL injection protection mechanisms via /%2a (/*) s
• CVE-2006-0907 HIGH 7.5 DOWNGRADE SQL injection vulnerability in PHP-Nuke before 7.8 Patched 3.2 allows remote attackers to execute arbitrary SQ
• CVE-2006-0805 HIGH 7.5 DOWNGRADE The CAPTCHA functionality in php-Nuke 6.0 through 7.9 uses fixed challenge/response pairs that only vary once
• CVE-2006-0679 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in the Your_Account module in PHP-Nuke 7.8 and earlier allows remote
• CVE-2006-0676 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in header.php in PHP-Nuke 6.0 to 7.8 allows remote attackers to injec
• CVE-2006-0163 HIGH 7.5 DOWNGRADE SQL injection vulnerability in the search module (modules/Search/index.php) of PHPNuke EV 7.7 -R1 allows remot
• CVE-2005-4715 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in modules.php in PHP-Nuke 7.8, when magic_quotes_gpc is disabled, allo
• CVE-2005-4260 MEDIUM 4.3 DOWNGRADE Interpretation conflict in includes/mainfile.php in PHP-Nuke 7.9 and later allows remote attackers to perform
• CVE-2005-3792 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in the Search module in PHP-Nuke 7.8, and possibly other versions befor
• CVE-2005-3304 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in PHP-Nuke 7.8 allow remote attackers to modify SQL queries and execut
• CVE-2005-3016 HIGH 10.0 UPGRADE Multiple unspecified vulnerabilities in the WYSIWYG editor in PHP-Nuke before 7.9 Final have unknown impact an
• CVE-2005-1386 MEDIUM 5.0 DOWNGRADE PHP-Nuke 7.6 and earlier allows remote attackers to obtain sensitive information via a direct request to (1) i
• CVE-2005-1180 MEDIUM 5.0 UPGRADE HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof w
• CVE-2005-1027 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inje
• CVE-2005-1024 MEDIUM 5.0 DOWNGRADE modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct reques
• CVE-2005-1023 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject ar
• CVE-2005-1001 MEDIUM 5.0 DOWNGRADE PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys mo
• CVE-2005-1000 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary
• CVE-2005-0999 HIGH 7.5 DOWNGRADE SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute
• CVE-2005-0998 MEDIUM 5.0 DOWNGRADE The Web_Links module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid s
• CVE-2005-0997 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to exec
• CVE-2005-0996 MEDIUM 5.0 DOWNGRADE Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inje
• CVE-2005-0434 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary
• CVE-2005-0433 MEDIUM 5.0 DOWNGRADE Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing argum
• CVE-2004-2354 MEDIUM 6.8 DOWNGRADE DOWNGRADE SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify
• CVE-2004-2297 MEDIUM 5.0 DOWNGRADE The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory
• CVE-2004-2296 MEDIUM 5.0 DOWNGRADE The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, all
• CVE-2004-2294 MEDIUM 4.3 DOWNGRADE Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 all
• CVE-2004-2293 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject ar
• CVE-2004-2044 HIGH 7.5 DOWNGRADE DOWNGRADE PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle,
• CVE-2004-2020 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 6.x through 7.3 allow remote attackers to inje
• CVE-2004-2019 MEDIUM 5.0 DOWNGRADE The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an
• CVE-2004-2018 HIGH 7.5 DOWNGRADE PHP remote file inclusion vulnerability in index.php in Php-Nuke 6.x through 7.3 allows remote attackers to ex
• CVE-2004-1999 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote att
• CVE-2004-1998 MEDIUM 5.0 DOWNGRADE The Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive information via an
• CVE-2004-1986 MEDIUM 5.0 DOWNGRADE DOWNGRADE Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remot
• CVE-2004-1984 MEDIUM 5.0 DOWNGRADE DOWNGRADE Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers to obtain sensitive information via a di
• CVE-2004-1972 HIGH 7.5 DOWNGRADE SQL injection vulnerability in modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers
• CVE-2004-1932 HIGH 7.5 DOWNGRADE SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attack
• CVE-2004-1930 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through
• CVE-2004-1929 HIGH 7.5 DOWNGRADE SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote
• CVE-2004-1914 HIGH 7.5 DOWNGRADE DOWNGRADE SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers
• CVE-2004-1913 MEDIUM 4.3 DOWNGRADE DOWNGRADE Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows rem
• CVE-2004-1912 MEDIUM 5.0 DOWNGRADE DOWNGRADE The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in
• CVE-2004-1840 MEDIUM 4.3 DOWNGRADE Multiple cross-site scripting (XSS) vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote attac
• CVE-2004-1839 MEDIUM 5.0 DOWNGRADE MS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a direct reque
• CVE-2004-1830 MEDIUM 5.0 DOWNGRADE error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an
• CVE-2004-1817 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in modules.php in Php-Nuke 7.1.0 allows remote attackers to inject ar
• CVE-2004-0738 HIGH 7.5 DOWNGRADE Multiple SQL injection vulnerabilities in the Search module in Php-Nuke allow remote attackers to execute arbi
• CVE-2004-0737 HIGH 7.5 DOWNGRADE Multiple cross-site scripting vulnerabilities in index.php in the Search module for Php-Nuke allows remote att
• CVE-2004-0736 MEDIUM 5.0 DOWNGRADE The search module in Php-Nuke allows remote attackers to gain sensitive information via the (1) "**" or (2) "+
• CVE-2004-0732 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in the Search module for Php-Nuke allows remote attackers to execute
• CVE-2004-0731 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in index.php in the Search module for Php-Nuke allows remote attacker
• CVE-2004-0269 MEDIUM 6.4 DOWNGRADE SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject a
• CVE-2004-0266 MEDIUM 5.0 DOWNGRADE SQL injection vulnerability in the "public message" capability (public_message) for Php-Nuke 6.x to 7.1.0 allo
• CVE-2004-0265 MEDIUM 6.8 DOWNGRADE Cross-site scripting (XSS) vulnerability in modules.php for Php-Nuke 6.x-7.1.0 allows remote attackers to exec
• CVE-2003-1547 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in block-Forums.php in the Splatt Forum module for PHP-Nuke 6.x allow
• CVE-2003-1526 MEDIUM 5.0 DOWNGRADE PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2)
• CVE-2003-1468 MEDIUM 4.3 DOWNGRADE The Web_Links module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server p
• CVE-2003-1435 HIGH 7.5 DOWNGRADE SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands
• CVE-2003-1400 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the Your_Account module for PHP-Nuke 5.0 through 6.0 allows remote
• CVE-2003-1210 HIGH 7.5 UPGRADE Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attac
• CVE-2003-0318 MEDIUM 4.3 UPGRADE Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote a
• CVE-2003-0279 LOW 2.6 DOWNGRADE Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 5.x through 6.5 allows remote atta
• CVE-2002-2032 MEDIUM 5.0 DOWNGRADE sql_layer.php in PHP-Nuke 5.4 and earlier does not restrict access to debugging features, which allows remote
• CVE-2002-1803 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in PHP-Nuke 6.0 allows remote attackers to inject arbitrary web scrip
• CVE-2002-1242 HIGH 7.5 DOWNGRADE SQL injection vulnerability in PHP-Nuke before 6.0 allows remote authenticated users to modify the database an
• CVE-2002-0483 MEDIUM 5.0 DOWNGRADE index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web s
• CVE-2002-0206 HIGH 7.5 DOWNGRADE index.php in Francisco Burzi PHP-Nuke 5.3.1 and earlier, and possibly other versions before 5.5, allows remote
• CVE-2001-1524 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in PHP-Nuke 5.3.1 and earlier allows remote attackers to inject arbit
• CVE-2001-1522 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in im.php in IMessenger for PHP-Nuke allows remote attackers to injec
• CVE-2001-1032 HIGH 7.5 UPGRADE admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations,
• CVE-2001-1025 HIGH 10.0 DOWNGRADE PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable wh
• CVE-2001-0911 HIGH 7.5 DOWNGRADE DOWNGRADE PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote att
• CVE-2001-0900 MEDIUM 5.0 UPGRADE Directory traversal vulnerability in modules.php in Gallery before 1.2.3 allows remote attackers to read arbit
• CVE-2001-0854 MEDIUM 5.0 DOWNGRADE PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with a
• CVE-2001-0383 MEDIUM 5.0 UPGRADE banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling t
• CVE-2001-0321 MEDIUM 5.0 DOWNGRADE opendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the filename as a
• CVE-2001-0320 HIGH 10.0 DOWNGRADE bb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP
• CVE-2001-0292 HIGH 7.5 DOWNGRADE PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing t
• CVE-2001-0001 HIGH 7.5 DOWNGRADE cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user acco
• CVE-2000-0745 HIGH 7.5 DOWNGRADE admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attac

FAQ

How do I fix francisco burzi vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is francisco burzi being exploited right now?

None of the tracked francisco burzi CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which francisco burzi CVE should I patch first?

CVE-2001-1025 currently ranks highest (62/100): PHP-Nuke 5.x allows remote attackers to perform arbitrary SQL operations by modifying the "prefix" variable wh.

Products

• gallery
• php-nuke
• php-nuke ev

RSS feed for francisco burzi · ← Back to latest CVEs