francisco_burzi Vulnerability Advisory Catalog

Total 93 security vulnerabilities recorded for francisco_burzi software and firmware.

← Back to All Vendors
CVE-2005-1027 UNKNOWN
Component: php-nuke

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x through 7.6 allow remote attackers to inject arbitrary web script or HTML via the ...

📅 2005-05-02
CVSS 4.3 Dossier →
CVE-2005-1024 UNKNOWN
Component: php-nuke

modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or ...

📅 2005-05-02
CVSS 5.0 Dossier →
CVE-2005-1023 UNKNOWN
Component: php-nuke

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.x to 7.6 allow remote attackers to inject arbitrary web script or HTML via the (1) m...

📅 2005-05-02
CVSS 4.3 Dossier →
CVE-2005-1001 UNKNOWN
Component: php-nuke

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comm...

📅 2005-05-02
CVSS 5.0 Dossier →
CVE-2005-1000 UNKNOWN
Component: php-nuke

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) the bid para...

📅 2005-05-02
CVSS 4.3 Dossier →
CVE-2005-0999 UNKNOWN
Component: php-nuke

SQL injection vulnerability in the Top module for PHP-Nuke 6.x through 7.6 allows remote attackers to execute arbitrary SQL commands via the querylang...

📅 2005-05-02
CVSS 7.5 Dossier →
CVE-2005-0998 UNKNOWN
Component: php-nuke

The Web_Links module for PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via an invalid show parameter, which triggers a division...

📅 2005-05-02
CVSS 5.0 Dossier →
CVE-2005-0997 UNKNOWN
Component: php-nuke

Multiple SQL injection vulnerabilities in the Web_Links module for PHP-Nuke 7.6 allow remote attackers to execute arbitrary SQL commands via (1) the e...

📅 2005-05-02
CVSS 7.5 Dossier →
CVE-2005-0996 UNKNOWN
Component: php-nuke

Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 7.6 allow remote attackers to inject arbitrary web script or HTML via (1) ...

📅 2005-05-02
CVSS 5.0 Dossier →
CVE-2005-0434 UNKNOWN
Component: php-nuke

Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 7.5 allow remote attackers to inject arbitrary HTML or web script via (1) the newdownl...

📅 2005-02-15
CVSS 4.3 Dossier →
CVE-2005-0433 UNKNOWN
Component: php-nuke

Php-Nuke 7.5 allows remote attackers to determine the full path of the web server via invalid or missing arguments to (1) db.php, (2) mainfile.php, (3...

📅 2005-02-15
CVSS 5.0 Dossier →
CVE-2004-2354 UNKNOWN
Component: php-nuke

SQL injection vulnerability in 4nGuestbook 0.92 for PHP-Nuke 6.5 through 6.9 allows remote attackers to modify SQL statements via the entry parameter ...

📅 2004-12-31
CVSS 6.8 Dossier →
CVE-2004-2297 UNKNOWN
Component: php-nuke

The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to cause a denial of service (CPU and memory consumption) via a large, out-of-range ...

📅 2004-12-31
CVSS 5.0 Dossier →
CVE-2004-2296 UNKNOWN
Component: php-nuke

The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive...

📅 2004-12-31
CVSS 5.0 Dossier →
CVE-2004-2295 UNKNOWN
Component: php-nuke

SQL injection vulnerability in the Reviews module in PHP-Nuke 6.0 to 7.3 allows remote attackers to execute arbitrary SQL commands via the order param...

📅 2004-12-31
CVSS 7.5 Dossier →
CVE-2004-2294 UNKNOWN
Component: php-nuke

Canonicalize-before-filter error in the send_review function in the Reviews module for PHP-Nuke 6.0 to 7.3 allows remote attackers to inject arbitrary...

📅 2004-12-31
CVSS 4.3 Dossier →
CVE-2004-2293 UNKNOWN
Component: php-nuke

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) e...

📅 2004-12-31
CVSS 4.3 Dossier →
CVE-2004-2020 UNKNOWN
Component: php-nuke

Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 6.x through 7.3 allow remote attackers to inject arbitrary HTML or web script into the...

📅 2004-12-31
CVSS 4.3 Dossier →
CVE-2004-2019 UNKNOWN
Component: php-nuke

The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays ...

📅 2004-12-31
CVSS 5.0 Dossier →
CVE-2004-2018 UNKNOWN
Component: php-nuke

PHP remote file inclusion vulnerability in index.php in Php-Nuke 6.x through 7.3 allows remote attackers to execute arbitrary PHP code by modifying th...

📅 2004-12-31
CVSS 7.5 Dossier →
CVE-2004-1914 UNKNOWN
Component: php-nuke

SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execute arbitrary SQL commands via t...

📅 2004-12-31
CVSS 7.5 Dossier →
CVE-2004-1913 UNKNOWN
Component: php-nuke

Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to inject arbitrary web sc...

📅 2004-12-31
CVSS 4.3 Dossier →
CVE-2004-1912 UNKNOWN
Component: php-nuke

The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCalendar 1.1.a, as used in PHP-Nuke...

📅 2004-12-31
CVSS 5.0 Dossier →
CVE-2004-0269 UNKNOWN
Component: php-nuke

SQL injection vulnerability in PHP-Nuke 6.9 and earlier, and possibly 7.x, allows remote attackers to inject arbitrary SQL code and gain sensitive inf...

📅 2004-11-23
CVSS 6.4 Dossier →
Page 2 of 4 (93 Total Records)