CVE Tools
Track your stack

Francisco-burzi

96 CVEs tracked since 2000. Since Oct 2000, none of them reached CISA KEV.

Francisco-burzi CVEs per month

Oct 2000 to Mar 2008. Point at a month, or focus the strip and use the arrow keys.
Francisco-burzi CVEs per month, with the share now in CISA KEV
MonthCVEsIn CISA KEV
2000-1010
2000-11null or fewer
2000-12null or fewer
2001-01null or fewer
2001-02null or fewer
2001-03null or fewer
2001-0420
2001-05null or fewer
2001-06null or fewer
2001-07null or fewer
2001-08null or fewer
2001-0910
2001-10null or fewer
2001-1110
2001-12null or fewer
2002-01null or fewer
2002-0220
2002-0320
2002-04null or fewer
2002-0510
2002-0630
2002-07null or fewer
2002-08null or fewer
2002-09null or fewer
2002-10null or fewer
2002-11null or fewer
2002-12null or fewer
2003-01null or fewer
2003-02null or fewer
2003-03null or fewer
2003-04null or fewer
2003-0520
2003-06null or fewer
2003-07null or fewer
2003-08null or fewer
2003-09null or fewer
2003-10null or fewer
2003-11null or fewer
2003-12null or fewer
2004-01null or fewer
2004-02null or fewer
2004-0330
2004-04null or fewer
2004-05null or fewer
2004-06null or fewer
2004-0750
2004-08null or fewer
2004-0910
2004-10null or fewer
2004-11null or fewer
2004-12null or fewer
2005-01null or fewer
2005-0220
2005-03null or fewer
2005-04100
2005-05250
2005-0610
2005-0730
2005-0850
2005-0910
2005-1010
2005-1110
2005-12null or fewer
2006-0110
2006-0260
2006-03null or fewer
2006-0420
2006-05null or fewer
2006-06null or fewer
2006-07null or fewer
2006-08null or fewer
2006-09null or fewer
2006-10null or fewer
2006-1110
2006-1220
2007-0120
2007-0210
2007-03null or fewer
2007-04null or fewer
2007-05null or fewer
2007-06null or fewer
2007-07null or fewer
2007-08null or fewer
2007-0910
2007-1040
2007-11null or fewer
2007-1210
2008-0110
2008-02null or fewer
2008-0310

Products

The products that kept showing up in Francisco-burzi's monthly top three, with their CVEs summed over those months.

  1. Php-nuke9332 months
  2. Php-nuke Ev22 months
  3. Gallery11 month

Latest CVEs

The 15 most recently published vulnerabilities affecting Francisco-burzi.

  1. CVE-2003-1547Cross-site scripting (XSS) vulnerability in block-Forums.php in the Splatt Forum module for PHP-Nuke 6.x allows remote attackers to inject arbitrary web script or HTML via the subject parameter.4.3
  2. CVE-2008-0461SQL injection vulnerability in index.php in the Search module in PHP-Nuke 8.0 FINAL and earlier, when magic_quotes_gpc is disabled, allows remote attackers to execute arbitrary SQL commands via the...6.8
  3. CVE-2007-6376Directory traversal vulnerability in autohtml.php in Francisco Burzi PHP-Nuke 8.0 allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the filename parameter, ...7.5
  4. CVE-2003-1526PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3) > in the search field, which reveals the path in an error message.5.0
  5. CVE-2003-1468The Web_Links module in PHP-Nuke 6.0 through 6.5 final allows remote attackers to obtain the full web server path via an invalid cid parameter that is non-numeric or null, which leaks the pathname ...4.3
  6. CVE-2003-1435SQL injection vulnerability in PHP-Nuke 5.6 and 6.0 allows remote attackers to execute arbitrary SQL commands via the days parameter to the search module.7.5
  7. CVE-2003-1400Cross-site scripting (XSS) vulnerability in the Your_Account module for PHP-Nuke 5.0 through 6.0 allows remote attackers to inject arbitrary web script or HTML via the user_avatar parameter.4.3
  8. CVE-2007-5032Cross-site request forgery (CSRF) vulnerability in admin.php in Francisco Burzi PHP-Nuke allows remote attackers to add administrative accounts via an AddAuthor action with modified add_name and ad...5.1
  9. CVE-2007-1061SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allows remote attackers to execute arbitrary SQL commands via ...6.8
  10. CVE-2007-0372Multiple SQL injection vulnerabilities in Francisco Burzi PHP-Nuke 7.9 allow remote attackers to execute arbitrary SQL commands via (1) the active parameter in admin/modules/modules.php; the (2) ad...7.5
  11. CVE-2007-0309SQL injection vulnerability in blocks/block-Old_Articles.php in Francisco Burzi PHP-Nuke 7.9 and earlier, when register_globals is enabled and magic_quotes_gpc is disabled, allows remote attackers ...7.5
  12. CVE-2006-6234Multiple SQL injection vulnerabilities in the Content module in PHP-Nuke 6.0, and possibly other versions, allow remote attackers to execute arbitrary SQL commands via (1) the cid parameter in a li...7.5
  13. CVE-2006-6200Multiple SQL injection vulnerabilities in the (1) rate_article and (2) rate_complete functions in modules/News/index.php in the News module in Francisco Burzi PHP-Nuke 7.9 and earlier, when magic_q...7.5
  14. CVE-2006-5720SQL injection vulnerability in modules/journal/search.php in the Journal module in Francisco Burzi PHP-Nuke 7.9 and earlier allows remote attackers to execute arbitrary SQL commands via the forwhat...7.5
  15. CVE-2006-1847SQL injection vulnerability in the Your_Account module in PHP-Nuke 7.8 might allows remote attackers to execute arbitrary SQL commands via the user_id parameter in the Your_Home functionality. NOT...7.5

The record

Peak rank
#2 in May 2005
Busiest month shown
May 2005, 25 CVEs
Months with a KEV entry
0 since Oct 2000
Monthly snapshots
33 since 2000
Francisco-burzi's full record, month by month

We use analytics cookies to see which pages and articles actually help people. Decline and none of them run — the site works the same. What we store