← Back

Nucleus Cms

nucleus_cms

4 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Nucleus Cms
nucleus_cms
3 CVEs
Nucleus
nucleus
1 CVE

CVEs (4)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2008-4446
1Nucleus Cms
1Nucleus
Apr 23, 2026
Oct 6, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Nucleus EUC-JP 3.31 SP1 and earlier allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2008-0497
1Nucleus Cms
1Nucleus Cms
Apr 23, 2026
Jan 30, 2008
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in action.php in Nucleus CMS 3.31 allows remote attackers to inject arbitrary web script or HTML via the PATH_INFO, which is not quoted when processing PHP_SELF.
CVE-2007-5429
1Nucleus Cms
1Nucleus Cms
Apr 23, 2026
Oct 12, 2007
N/A· v4
N/A· v3
4.3 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in index.php in Nucleus 3.01 allows remote attackers to inject arbitrary web script or HTML via the archive parameter.
CVE-2006-6920
1Nucleus Cms
1Nucleus Cms
Apr 23, 2026
Jan 11, 2007
N/A· v4
N/A· v3
6.8 MEDIUM· v2
Cross-site scripting (XSS) vulnerability in Nucleus before 3.24 allows remote attackers to inject arbitrary web script or HTML via unknown vectors, possibly involving (1) lib/ADMIN.php and (2) lib/SKIN.php.