CVE-2006-2583

CVE-2006-2583 is a PHP remote file inclusion vulnerability in Nucleus CMS (affected: Nucleus 3.22 and earlier). It allows remote attackers to execute arbitrary PHP code by supplying a URL via the GLOBALS[DIR_LIBS] parameter in nucleus/libs/PLUGINADMIN.php. Related records note this as a reproduci...

CVE-2006-3136

CVE-2006-3136 affects Nucleus CMS 3.23 and reports multiple PHP remote file inclusion vulnerabilities. The issue allows an attacker to trigger arbitrary PHP code execution by supplying a URL via the DIR_LIBS parameter in the affected endpoints: path/action.php and files under path/nucleus includi...

CVE-2004-2056

Summary: CVE-2004-2056 is a SQL injection vulnerability in Nucleus CMS 3.01, affecting action.php via the itemid parameter. What is affected: Nucleus CMS 3.01 (action.php) — SQL injection via itemid. Root cause and impact (as stated): The vulnerability allows an attacker to execute arbitrary SQL ...

CVE-2009-0929

The CVE; Affected software: Nucleus CMS (Media Manager) prior to version 3.40. Issue: directory traversal allows remote attackers to read arbitrary files via unknown vectors. Impact: information disclosure affecting confidentiality (partial). Root cause: vulnerability in the media manager path ha...