postnuke software foundation postnuke

Name: postnuke software foundation postnuke
Brand: postnuke software foundation

productUS

cpe:2.3:a:postnuke_software_foundation:postnuke:*:*:*:*:*:*:*:*

A product tracked in the threat graph; the vulnerabilities below are known to affect it.

KEV-listed

critical

by severity

0critical19high10medium9low

updated 2026-10-28

vulnerabilities (38)

Related CVEs.

sort

ID	severity	EPSS	exploitable	patched	published	affected
CVE-2006-0146US	high7.5	13.2% (96th)	Exploit	no fix	2006-01-09	= 0.761
CVE-2006-0147US	high7.5	13.1% (96th)	Exploit	no fix	2006-01-09	= 0.761
CVE-2002-2015US	high7.5	9.49% (95th)	Exploit	no fix	2002-12-31	= 0.703
CVE-2002-0535US	medium5.0	7.36% (94th)	Exploit	no fix	2002-07-03	4 versions
CVE-2005-1049US	low2.6	3.54% (89th)	Exploit	no fix	2005-05-02	= 0.760_rc3
CVE-2001-1460US	high7.5	3.28% (88th)	Exploit	no fix	2001-10-13	3 versions
CVE-2006-5733US	high7.5	3.01% (87th)	Exploit	no fix	2006-11-06	2 versions
CVE-2006-0800US	low2.6	2.18% (82nd)	Exploit	no fix	2006-02-20	19 versions
CVE-2005-2689US	low2.6	1.43% (73rd)	Exploit	no fix	2005-08-24	= 0.76_rc4b
CVE-2006-0801US	medium5.1	1.22% (68th)	Exploit	no fix	2006-02-20	≤ 0.761
CVE-2005-1777US	high7.5	1.16% (67th)	Exploit	no fix	2005-05-31	= 0.750
CVE-2005-2690US	high7.5	0.98% (62nd)	Exploit	no fix	2005-08-24	= 0.76_rc4b
CVE-2001-0911US	high7.5OT elevated	3.87% (90th)	—	no fix	2001-11-21	= 0.64
CVE-2004-1949US	high7.5	1.96% (80th)	—	no fix	2004-12-31	= 0.726
CVE-2005-1621US	medium5.0	1.69% (77th)	—	no fix	2005-05-16	4 versions
CVE-2007-0386US	high10.0	1.58% (75th)	—	no fix	2007-01-19	= 0.764
CVE-2007-0385US	high7.8	1.56% (75th)	—	no fix	2007-01-19	= 0.764
CVE-2004-1956US	medium5.0	1.55% (75th)	—	no fix	2004-04-21	= 0.726
CVE-2005-1050US	medium5.0	1.43% (73rd)	—	no fix	2005-05-02	= 0.760_rc3
CVE-2005-1048US	high7.5	1.41% (73rd)	—	no fix	2005-05-02	= 0.760_rc3
CVE-2006-6267US	high7.8	1.40% (72nd)	—	no fix	2006-12-04	= 0.7.5.0
CVE-2006-0802US	low2.6	1.37% (72nd)	—	no fix	2006-02-20	≤ 0.761
CVE-2006-5121US	high7.5	1.35% (71st)	—	no fix	2006-10-03	= 0.762
CVE-2004-2751US	medium6.8	1.35% (71st)	—	no fix	2004-12-31	3 versions
CVE-2003-1537US	medium5.0	1.34% (71st)	—	no fix	2003-12-31	≤ 0.723
CVE-2002-1996US	low2.6	1.26% (69th)	—	no fix	2002-12-31	7 versions
CVE-2007-0384US	medium5.1	1.24% (69th)	—	no fix	2007-01-19	= 0.764
CVE-2005-0615US	high7.5	1.20% (68th)	—	no fix	2005-05-02	= 0.760_rc2
CVE-2005-0617US	high7.5	1.20% (68th)	—	no fix	2005-05-02	2 versions
CVE-2001-1521US	low2.6	1.17% (67th)	—	no fix	2001-12-31	3 versions
CVE-2005-1695US	low2.6	1.16% (67th)	—	no fix	2005-05-24	3 versions
CVE-2006-6233US	high7.5	1.15% (67th)	—	no fix	2006-12-02	10 versions
CVE-2005-1694US	high7.5	1.11% (66th)	—	no fix	2005-05-24	= 0.750
CVE-2004-2752US	medium4.3	1.02% (63rd)	—	no fix	2004-12-31	= 0.726
CVE-2005-1699US	medium4.0	0.98% (62nd)	—	no fix	2005-05-24	= 0.760_rc3
CVE-2005-1778US	low2.6	0.96% (61st)	—	no fix	2005-05-31	= 0.750
CVE-2005-1700US	high7.5	0.94% (61st)	—	no fix	2005-05-24	= 0.760_rc3
CVE-2005-1696US	low2.6	0.90% (60th)	—	no fix	2005-05-24	2 versions

weaknesses (8)

The flaw types (CWEs) most of these CVEs share.

CWE-89Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')14 CVEs
CWE-79Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')12 CVEs
CWE-200Exposure of Sensitive Information to an Unauthorized Actor4 CVEs
CWE-22Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')4 CVEs
CWE-209Generation of Error Message Containing Sensitive Information1 CVEs
CWE-310CWE-3101 CVEs
CWE-319Cleartext Transmission of Sensitive Information1 CVEs
CWE-80Improper Neutralization of Script-Related HTML Tags in a Web Page (Basic XSS)1 CVEs

sources (1)

Which sources assert this record, and when.

USNVD / CVE38 CVEs

scry

Products carry known vulnerabilities once they are exposed to the internet. See what is exposed on your perimeter with a free passive scan.

Free scan