Skip to content

Phpnuke · weakness class

SQL Injection

28 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Every one of the 28 is a mark on the map. Named now: 1 to 26, most at risk first.

  1. There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution. This occurs because the U.S. state is not validated to…CVE-2021-30177Phpnuke · 2.4% likely

    CWE-89

  2. SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics[] parameter to modules.php.CVE-2014-3934Phpnuke · 2.2% likely

    CWE-89

  3. SQL injection vulnerability in the category file in modules.php in the Emporium 2.3.0 and earlier module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via…CVE-2007-1034Php-Nuke · 1.6% likely

    CWE-89

  4. SQL injection vulnerability in the Downloads module for PHP-Nuke 8.0 8.1.0.3.5b and earlier allows remote authenticated users to execute arbitrary SQL commands via the url paramet…CVE-2009-0302Php-Nuke · 1.5% likely

    CWE-89

  5. SQL injection vulnerability in modules.php in the Web_Links module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewlink actio…CVE-2008-0879Phpnuke · 1.3% likely

    CWE-89

  6. SQL injection vulnerability in the Kutub-i Sitte (KutubiSitte) 1.1 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the kid parameter in a hadisgo…CVE-2008-1219Phpnuke · 1.2% likely

    CWE-89

  7. SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via th…CVE-2011-1480Phpnuke · 1.2% likely

    CWE-89

  8. SQL injection vulnerability in the Book Catalog module 1.0 for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the catid parameter in a category action to m…CVE-2008-3513Php Nuke · 1.1% likely

    CWE-89

  9. SQL injection vulnerability in Hadith module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter in a viewcat action to modules.php.CVE-2008-1298Php-Nuke · 1.1% likely

    CWE-89

  10. SQL injection vulnerability in modules.php in the Current_Issue module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a summary act…CVE-2008-6866Php-Nuke · 1.1% likely

    CWE-89

  11. SQL injection vulnerability in modules.php in the Sectionsnew module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpage…CVE-2008-6865Php-Nuke · 1.1% likely

    CWE-89

  12. SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpa…CVE-2008-6728Phpnuke · 1.1% likely

    CWE-89

  13. SQL injection vulnerability in modules.php in the EasyContent module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the page_id parameter.CVE-2008-0880Phpnuke · 1.1% likely

    CWE-89

  14. SQL injection vulnerability in modules.php in the Okul 1.0 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the okulid parameter in an okullar act…CVE-2008-0881Phpnuke · 1.1% likely

    CWE-89

  15. SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.ph…CVE-2010-5083Phpnuke · 1.0% likely

    CWE-89

  16. SQL injection vulnerability in the ZClassifieds module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cat parameter to modules.php.CVE-2008-1315Php-Nuke · 1.0% likely

    CWE-89

  17. SQL injection vulnerability in the 4ndvddb 0.91 module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a show_dvd action.CVE-2008-3151Phpnuke · 1.0% likely

    CWE-89

  18. SQL injection vulnerability in the Books module of PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter.CVE-2008-0827Phpnuke · 1.0% likely

    CWE-89

  19. SQL injection vulnerability in index.php in the Recipes module 1.3, 1.4, and possibly other versions for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the…CVE-2008-7226Php-Nuke · 1.0% likely

    CWE-89

  20. SQL injection vulnerability in the Sarkilar module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the id parameter in a showcontent action to modules.p…CVE-2008-6779Phpnuke · 1.0% likely

    CWE-89

  21. Multiple SQL injection vulnerabilities in the Kose_Yazilari module for PHP-Nuke allow remote attackers to execute arbitrary SQL commands via the artid parameter in a (1) viewartic…CVE-2008-1053Phpnuke · 1.0% likely

    CWE-89

  22. SQL injection vulnerability in the Docum module in PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the artid parameter in a viewarticle operation.CVE-2008-0906Php-Nuke · 1.0% likely

    CWE-89

  23. SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.CVE-2009-1842Phpnuke · 1.0% likely

    CWE-89

  24. SQL injection vulnerability in the Kleinanzeigen module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the lid parameter in a visit action to modules.p…CVE-2008-3512Php Nuke · 1.0% likely

    CWE-89

  25. SQL injection vulnerability in the Inhalt module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter.CVE-2008-0907Php-Nuke · 0.9% likely

    CWE-89

  26. Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to execute arbitrary SQL commands via (1) a uid (user) cookie to mo…CVE-2003-1340Phpnuke · 0.9% likely

    CWE-89

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-14 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.