📦

postnuke

Vendor: postnuke

Login to add this product to WatchStack
Actively Exploited 0 CISA KEV List
PoC / Exploits 16 Code Available
Total RCEs 0 Remote Access
Total CVEs 234 Total Indexed
Avg. EPSS 2.42% Exploit Prob.
Latest CVE CVE-2010-1713 May 04

Security Vulnerability Index

Page 5 / 24
5.0 CVSS
CVE-2002-0535
Exploit Found

Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.

EPSS: 7.37%
2.6 CVSS
CVE-2001-1521

Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web script or HTML via the uname parameter.

EPSS: 1.17%
7.5 CVSS
CVE-2001-0911

PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it.

EPSS: 3.87%
7.5 CVSS
CVE-2001-1460
Exploit Found

SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter.

EPSS: 3.28%