CVE-2005-3792: francisco_burzi php-nuke

EPSS trend

Probability

44.29%

Chance of exploitation in the next 30 days

Percentile

99%

Versus all other CVEs

30-day change

0.00 pp

From 44.29% on 22-09-2026

22-09-202622-10-2026

EPSS score

44.29%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

3 found

referenceUnverified
Exploit Reference (securityreason.com)
Maturity: unknown
referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasephpVerified
PHP-Nuke 7.8 Search Module - SQL Injection
Maturity: poc

References

13 links

archives.neohapsis.com/archives/fulldisclosure/2005-11/0454.htmlMailing ListX Refsource FULLDISC
marc.info?l=bugtraq&m=113210758511323&w=2Mailing ListX Refsource BUGTRAQ
www.securityfocus.com/archive/1/425508/100/0/threadedMailing ListX Refsource BUGTRAQ
www.waraxe.us/advisory-46.htmlX Refsource MISC
securitytracker.com/id?1015651VDB EntryX Refsource SECTRACK
exchange.xforce.ibmcloud.com/vulnerabilities/23079VDB EntryX Refsource XF
www.osvdb.org/20866VDB EntryX Refsource OSVDB
securityreason.com/achievement_exploitalert/5X Refsource MISCExploit
www.vupen.com/english/advisories/2005/2446VDB EntryX Refsource VUPEN
securitytracker.com/id?1015215VDB EntryX Refsource SECTRACK

Show all 13 references

secunia.com/advisories/17543/Third Party AdvisoryX Refsource SECUNIAVendor Advisory
www.securityfocus.com/bid/15421VDB EntryX Refsource BIDExploit
www.securityfocus.com/archive/1/425627/100/0/threadedMailing ListX Refsource BUGTRAQ

Related vulnerabilities

CVE-2003-1210francisco_burziphp-nuke5.37%21y ago19-05-2005 04:00Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.CVE-2003-0318francisco_burziphp-nuke1.04%23y ago22-05-2003 04:00Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary web script via the year parameter.CVE-2007-1061francisco_burziphp-nuke61.76%19y ago22-02-2007 00:00SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header (HTTP_REFERER variable).CVE-2007-0372francisco_burziphp-nuke4.01%19y ago19-01-2007 23:00Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via (1) the active parameter in admin/modules/modules.php; the (2) ad_class, (3) imageurl, (4) clickurl, (5) ad_code, or (6) position parameter in modules/Advertising/admin/index.php; or unspecified vectors in the (7) advertising, (8) weblinks, or (9) reviews section.CVE-2007-0309francisco_burziphp-nuke4.70%19y ago18-01-2007 00:00SQL injection vulnerability in blocks/block-Old_Articles.php in Francisco Burzi PHP-Nuke 7.9 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the cat parameter.CVE-2007-5032francisco_burziphp-nuke0.57%19y ago21-09-2007 18:00Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters.

All vulnerabilities inphp-nuke

CVE-2005-3792: francisco_burzi php-nuke

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References