← Back

Postnuke Software Foundation

postnuke_software_foundation

47 CVEs • 9 products

Products (9)

Click to collapse
Toggle
Postnuke
postnuke
38 CVEs
Postcalendar
postcalendar
2 CVEs
Pnphpbb
pnphpbb
2 CVEs
Pagesetter
pagesetter
1 CVE
Postnuke V4bjournal Module
postnuke_v4bjournal_module
1 CVE
Pnphpbb2
pnphpbb2
1 CVE
Postschedule
postschedule
1 CVE
Pnencyclopedia
pnencyclopedia
1 CVE
Postnuke Phoenix
postnuke_phoenix
0 CVEs

CVEs (47)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2002-2015
1Postnuke Software Foundation
1Postnuke
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP file inclusion vulnerability in user.php in PostNuke 0.703 allows remote attackers to include arbitrary files and possibly execute code via the caselist parameter.
CVE-2002-1996
1Postnuke Software Foundation
1Postnuke
Apr 16, 2026
Dec 31, 2002
N/A· v4
N/A· v3
2.6 LOW· v2
Cross-site scripting (XSS) vulnerability in PostNuke 0.71 and earlier allows remote attackers to inject arbitrary web script or HTML via the (1) name parameter in modules.php and (2) catid parameter in index.php.
CVE-2002-0739
1Postnuke Software Foundation
1Postcalendar
Apr 16, 2026
Aug 12, 2002
N/A· v4
N/A· v3
7.5 HIGH· v2
Cross-site scripting in PostCalendar 3.02 allows remote attackers to insert arbitrary HTML and script, and steal cookies, by modifying a calendar entry in its preview page.
CVE-2002-0535
2Postboard
Postnuke Software Foundation
2Postboard
Postnuke
Apr 16, 2026
Jul 3, 2002
N/A· v4
N/A· v3
5.0 MEDIUM· v2
Cross-site scripting vulnerabilities in PostBoard 2.0.1 and earlier allows remote attackers to execute script as other users via (1) an [IMG] tag when BBCode is enabled, or (2) in a topic title.
CVE-2001-1521
1Postnuke Software Foundation
1Postnuke
Apr 16, 2026
Dec 31, 2001
N/A· v4
N/A· v3
2.6 LOW· v2
Cross-site scripting (XSS) vulnerability in user.php in PostNuke 0.64 allows remote attackers to inject arbitrary web script or HTML via the uname parameter.
CVE-2001-0911
2Francisco Burzi
Postnuke Software Foundation
2Php Nuke
Postnuke
Apr 16, 2026
Nov 21, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it.
CVE-2001-1460
1Postnuke Software Foundation
1Postnuke
Apr 16, 2026
Oct 13, 2001
N/A· v4
N/A· v3
7.5 HIGH· v2
SQL injection vulnerability in article.php in PostNuke 0.62 through 0.64 allows remote attackers to bypass authentication via the user parameter.