PatchTheCVEphp-nuke vulnerabilities
Recent CVEs affecting php-nuke products. 7 tracked.
php-nuke has 7 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 0. Most recent: 2009-09-14. Highest priority: CVE-2008-4767 (score 59/100).
- CVE-2009-0302 MEDIUM 4.6 DOWNGRADE SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote auth
- CVE-2008-7226 HIGH 7.5 DOWNGRADE SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-N
- CVE-2008-6866 HIGH 7.5 MITIGATE SQL injection vulnerability in modules.php in the Current_Issue module for PHP-Nuke allows remote attackers to
- CVE-2008-6865 HIGH 7.5 MITIGATE SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to e
- CVE-2008-5039 MEDIUM 4.3 DOWNGRADE Cross-site scripting (XSS) vulnerability in the League module for PHP-Nuke, possibly 2.4, allows remote attack
- CVE-2008-4767 HIGH 9.0 MITIGATE Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to exec
- CVE-2008-3573 MEDIUM 5.0 DOWNGRADE DOWNGRADE The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critica
FAQ
How do I fix php-nuke vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is php-nuke being exploited right now?
None of the tracked php-nuke CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which php-nuke CVE should I patch first?
CVE-2008-4767 currently ranks highest (59/100): Unrestricted file upload vulnerability in the DownloadsPlus module in PHP-Nuke allows remote attackers to exec.