Francisco Burzi Php-nuke Vulnérabilités

Version

6.0	38
7.1	34
7.0	32
7.2	32
7.3	30

Contre-mesures

Official Fix	24
Temporary Fix	0
Workaround	0
Unavailable	20
Not Defined	44

Exploitabilité

High	14
Functional	6
Proof-of-Concept	18
Unproven	0
Not Defined	50

Vecteur d'accès

Not Defined	0
Physical	0
Local	0
Adjacent	0
Network	88

Authentification

Not Defined	0
High	0
Low	0
None	88

Interaction de l'utilisateur

Not Defined	0
Required	26
None	62

CVSSv3 Base

≤1	0
≤2	0
≤3	0
≤4	0
≤5	24
≤6	20
≤7	4
≤8	36
≤9	0
≤10	4

CVSSv3 Temp

≤1	0
≤2	0
≤3	0
≤4	2
≤5	26
≤6	18
≤7	22
≤8	16
≤9	0
≤10	4

VulDB

≤1	0
≤2	0
≤3	0
≤4	0
≤5	24
≤6	20
≤7	4
≤8	36
≤9	0
≤10	4

NVD

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

CNA

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Fournisseur

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Research

≤1	0
≤2	0
≤3	0
≤4	0
≤5	0
≤6	0
≤7	0
≤8	0
≤9	0
≤10	0

Exploiter 0 jour

<1k	2
<2k	44
<5k	40
<10k	0
<25k	0
<50k	2
<100k	0
≥100k	0

Exploiter aujourd'hui

<1k	88
<2k	0
<5k	0
<10k	0
<25k	0
<50k	0
<100k	0
≥100k	0

Affected Versions (41): 1.0, 2.5, 3.0, 4.0, 4.0.4, 4.3, 4.4, 4.4.1a, 5.0, 5.0.1, 5.1, 5.2, 5.2a, 5.3.1, 5.4, 5.5, 5.6, 6.0, 6.5, 6.5 Beta1, 6.5 Final, 6.5 Rc1, 6.5 Rc2, 6.5 Rc3, 6.6, 6.7, 6.8, 6.9, 7.0, 7.0 Final, 7.1, 7.2, 7.3, 7.4, 7.5, 7.6, 7.7, 7.8, 7.8 Patched 3.2, 7.9, 8.0 Final

Link to Product Website: https://bitbucket.org/phpnuke/phpnuke

Type de logiciel: Content Management System

Publié	Base	Temp	Vulnérabilité	0day	Aujourd'hui	Exp	Con	CTI	CVE
21/02/2008	7.3	6.9	Francisco Burzi PHP-Nuke modules.php sql injection	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.05	CVE-2004-2000
23/01/2008	6.3	6.3	Francisco Burzi PHP-Nuke index.php sql injection	$5k-$25k	$0-$5k	High	Unavailable	0.00	CVE-2008-0461
10/12/2007	7.3	6.9	Francisco Burzi PHP-Nuke autohtml.php directory traversal	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2007-6376
20/09/2007	6.3	6.0	Francisco Burzi PHP-Nuke admin.php cross site request forgery	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2007-5032
02/04/2007	7.3	7.1	Francisco Burzi PHP-Nuke Addressbook addressbook.php directory traversal	$25k-$100k	$0-$5k	Functional	Unavailable	0.00	CVE-2007-1720
20/02/2007	7.3	7.3	Francisco Burzi PHP-Nuke index.php sql injection	$0-$5k	$0-$5k	High	Unavailable	0.00	CVE-2007-1061
04/02/2007	7.3	7.3	Francisco Burzi PHP-Nuke modules.php sql injection	$0-$5k	$0-$5k	Not Defined	Not Defined	0.00	CVE-2007-0372
13/01/2007	7.3	6.9	Francisco Burzi PHP-Nuke block-Old_Articles.php sql injection	$0-$5k	$0-$5k	Proof-of-Concept	Not Defined	0.00	CVE-2007-0309
02/12/2006	7.3	7.1	Francisco Burzi PHP-Nuke sql injection	$0-$5k	$0-$5k	Functional	Unavailable	0.00	CVE-2006-6234
30/11/2006	7.3	6.8	Francisco Burzi PHP-Nuke sql injection	$0-$5k	$0-$5k	Functional	Unavailable	0.00	CVE-2006-6200