CVE-2007-0309: francisco_burzi php-nuke

EPSS trend

Probability

4.70%

Chance of exploitation in the next 30 days

Percentile

92%

Versus all other CVEs

30-day change

+0.04 pp

From 4.66% on 19-09-2026

19-09-202619-10-2026

EPSS score

4.70%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

2 found

referenceUnverified
Exploit Reference (securityfocus.com)
Maturity: unknown
exploit-databasephpVerified
PHP-Nuke 7.x - 'Block-Old_Articles.php' SQL Injection
Maturity: poc

References

8 links

exchange.xforce.ibmcloud.com/vulnerabilities/31482VDB EntryX Refsource XF
www.neosecurityteam.net/advisories/…X Refsource MISC
osvdb.org/32863VDB EntryX Refsource OSVDB
secunia.com/advisories/23748Third Party AdvisoryX Refsource SECUNIA
securitytracker.com/id?1017511VDB EntryX Refsource SECTRACK
securityreason.com/securityalert/2153Third Party AdvisoryX Refsource SREASON
www.securityfocus.com/bid/22037VDB EntryX Refsource BIDExploit
www.securityfocus.com/archive/1/456787/100/0/threadedMailing ListX Refsource BUGTRAQ

Related vulnerabilities

CVE-2003-1210francisco_burziphp-nuke5.37%21y ago19-05-2005 04:00Multiple SQL injection vulnerabilities in the Downloads module for PHP-Nuke 5.x through 6.5 allow remote attackers to execute arbitrary SQL commands via the (1) lid parameter to the getit function or the (2) min parameter to the search function.CVE-2003-0318francisco_burziphp-nuke1.04%23y ago22-05-2003 04:00Cross-site scripting (XSS) vulnerability in the Statistics module for PHP-Nuke 6.0 and earlier allows remote attackers to insert arbitrary web script via the year parameter.CVE-2007-1061francisco_burziphp-nuke61.76%19y ago22-02-2007 00:00SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header (HTTP_REFERER variable).CVE-2007-0372francisco_burziphp-nuke4.01%19y ago19-01-2007 23:00Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via (1) the active parameter in admin/modules/modules.php; the (2) ad_class, (3) imageurl, (4) clickurl, (5) ad_code, or (6) position parameter in modules/Advertising/admin/index.php; or unspecified vectors in the (7) advertising, (8) weblinks, or (9) reviews section.CVE-2007-5032francisco_burziphp-nuke0.57%19y ago21-09-2007 18:00Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and add_radminsuper parameters.CVE-2001-1032francisco_burziphp-nuke3.12%24y ago25-06-2002 04:00admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers to copy and upload arbitrary files and read the PHP-Nuke configuration file by directly calling admin.php with an upload parameter and specifying the file to copy.

All vulnerabilities inphp-nuke

CVE-2007-0309: francisco_burzi php-nuke

Vulnerability summary

Timeline

Description

CVSS metrics

EPSS trend

Known exploited

Public exploits

Weaknesses

Affected systems

References