PatchTheCVEphpnuke vulnerabilities
Recent CVEs affecting phpnuke products. 2 tracked.
phpnuke has 2 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2021-04-07. Highest priority: CVE-2021-30177 (score 65/100).
- CVE-2021-30177 CRITICAL 9.8 DOWNGRADE There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote c
- CVE-2014-3934 HIGH 7.5 DOWNGRADE MITIGATE SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbi
FAQ
How do I fix phpnuke vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is phpnuke being exploited right now?
None of the tracked phpnuke CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which phpnuke CVE should I patch first?
CVE-2021-30177 currently ranks highest (65/100): There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote c.