VYPR

Platinum

by Futurenuke

CVEs (2)

  • CVE-2007-5676Oct 24, 2007
    risk 0.03cvss epss 0.03

    PHP remote file inclusion vulnerability in modules/Forums/favorites.php in PHP-Nuke Platinum 7.6.b.5 allows remote attackers to execute arbitrary PHP code via a URL in the nuke_bb_root_path parameter.

  • CVE-2006-0829Feb 21, 2006
    risk 0.00cvss epss 0.01

    Cross-site scripting vulnerability in E-Blah Platinum 9.7 allows remote attackers to inject arbitrary web script or HTML via the referer (HTTP_REFERER), which is not sanitized when the log file is viewed by the administrator using "Click Log".