Php-Nuke

Every one of the 21 is a mark on the map. Named now: 1 to 21, most at risk first.

1. Network Tools 0.2 for PHP-Nuke allows remote attackers to execute commands on the server via shell metacharacters in the $hostinput variable.CVE-2001-0899Phpnuke · 8.9% likely
2. Multiple PHP remote file inclusion vulnerabilities in modules/My_eGallery/public/displayCategory.php in the pandaBB module for PHP-Nuke allow remote attackers to execute arbitrary…CVE-2006-5494Phpnuke · 3.2% likely

   CWE-94

3. There is a SQL Injection vulnerability in PHP-Nuke 8.3.3 in the User Registration section, leading to remote code execution. This occurs because the U.S. state is not validated to…CVE-2021-30177Phpnuke · 2.4% likely

   CWE-89

4. SQL injection vulnerability in the Submit_News module for PHP-Nuke 8.3 allows remote attackers to execute arbitrary SQL commands via the topics[] parameter to modules.php.CVE-2014-3934Phpnuke · 2.2% likely

   CWE-89

5. The CAPTCHA implementation in (1) Pligg 9.9.5 and possibly (2) Francisco Burzi PHP-Nuke 8.1 provides a critical random number (the ts_random value) within the URL in the SRC attri…CVE-2008-3573Php-Nuke · 1.9% likely

   CWE-264

6. Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php.CVE-2004-1842Phpnuke · 1.7% likely

   CWE-352

7. Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.CVE-2007-1449Phpnuke · 1.3% likely
8. Francisco Burzi PHP-Nuke 8.0 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message,…CVE-2011-3784Phpnuke · 1.2% likely

   CWE-200

9. PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2) the Surveys module,…CVE-2005-1028Phpnuke · 1.2% likely

   CWE-200

10. Cross-site scripting (XSS) vulnerability in modules.php in PHP-Nuke 8.0 and earlier allows remote attackers to inject arbitrary web script or HTML via the query parameter in a sea…CVE-2007-1519Phpnuke · 1.2% likely

    CWE-79

11. SQL injection vulnerability in admin.php in the administration backend in Francisco Burzi PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands via th…CVE-2011-1480Phpnuke · 1.2% likely

    CWE-89

12. SQL injection vulnerability in the Sections module in PHP-Nuke, probably before 8.0, allows remote attackers to execute arbitrary SQL commands via the artid parameter in a printpa…CVE-2008-6728Phpnuke · 1.1% likely

    CWE-89

13. Incomplete blacklist vulnerability in mainfile.php in PHP-Nuke 7.9 and earlier allows remote attackers to conduct SQL injection attacks via (1) "/**/UNION " or (2) " UNION/**/" se…CVE-2006-5525Phpnuke · 1.1% likely
14. Multiple cross-site scripting (XSS) vulnerabilities in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) sender_na…CVE-2011-1481Phpnuke · 1.1% likely

    CWE-79

15. SQL injection vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to execute arbitrary SQL commands in the Top or News module via the lang parameter.CVE-2007-1450Phpnuke · 1.1% likely
16. Multiple cross-site scripting (XSS) vulnerabilities in the Search Module in PHP-Nuke allow remote attackers to inject arbitrary web script or HTML via a trailing "<" instead of a…CVE-2007-4212Phpnuke · 1.0% likely
17. SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.ph…CVE-2010-5083Phpnuke · 1.0% likely

    CWE-89

18. SQL injection vulnerability in main/tracking/userLog.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header.CVE-2009-1842Phpnuke · 1.0% likely

    CWE-89

19. Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 5.6 and 6.5 allow remote authenticated users to execute arbitrary SQL commands via (1) a uid (user) cookie to mo…CVE-2003-1340Phpnuke · 0.9% likely

    CWE-89

20. The cross-site request forgery (CSRF) protection in PHP-Nuke 8.0 and earlier does not ensure the SERVER superglobal is an array before validating the HTTP_REFERER, which allows re…CVE-2007-1520Phpnuke · 0.8% likely

    CWE-352

21. Multiple cross-site request forgery (CSRF) vulnerabilities in mainfile.php in Francisco Burzi PHP-Nuke 8.0 and earlier allow remote attackers to hijack the authentication of admin…CVE-2011-1482Phpnuke · 0.6% likely

    CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.