EUVD-2004-1822

Malware in sbrugna...

EUVD-2009-0307

Malware in sbrugna...

EUVD-2005-3367

Malware in sbrugna...

EUVD-2004-1992

Malware in sbrugna...

EUVD-2003-1516

Malware in sbrugna...

EUVD-2007-5888

Malware in sbrugna...

EUVD-2008-6997

Malware in sbrugna...

EUVD-2008-6826

Malware in sbrugna...

EUVD-2002-2011

Malware in sbrugna...

EUVD-2007-4195

Malware in sbrugna...

EUVD-2004-2036

Malware in sbrugna...

EUVD-2002-0480

Malware in sbrugna...

EUVD-2004-2287

Malware in sbrugna...

CVE-2021-30177

There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution. This occurs because the U.S. state is not validated to be two letters, and the OrderBy field is not validated to be one of LASTNAME, CITY, or STATE...

CVE-2014-3934

SQL injection vulnerability in the SubmitNews module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics parameter to modules.php...

CVE-2011-3784

Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by themes/Odyssey/theme.php and certain other files...

CVE-2011-1482

Multiple cross-site request forgery CSRF vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of administrators for requests that 1 add user accounts or 2 grant the administrative privilege to a user account, related to a...

CVE-2011-1480

SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via the chnguid parameter...

CVE-2011-1481

Multiple cross-site scripting XSS vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the 1 sendername or 2 senderemail parameter in a Feedback action to modules.php...

CVE-2005-3281

Directory traversal vulnerability in NukeFixes 3.1 for PHP-Nuke 7.8 allows remote attackers to include arbitrary files via the file parameter...