Vulnerabilidades

Resumen — últimos 7 días

Vulnerabilidades nuevas2635▼ 211 respecto a la semana anterior

Críticas / altas1376▲ 147 respecto a la semana anterior

Nueva explotación activa (KEV)7▼ 3 respecto a la semana anterior

Sin puntuar (sin CVSS)81▼ 449 respecto a la semana anterior

6 resultados, ordenados por fecha de publicación (más recientes primero)

CVE	Estado	Severidad	EPSS	Explotación activa	Tecnologías afectadas	Publicada ▼	Modificada	Descripción
CVE-2015-5497	Modificada	Baja (3.5)	0.97%	—	WEB Links Project WEB Links	18/8/2015	17/6/2026	Cross-site scripting (XSS) vulnerability in the Web Links module 6.x-2.x before 6.x-2.6 and 7.x-1.x before 7.x-1.0 for Drupal allows remote authenticated users with certain permissions to inject arbitrary web script or HTML via unspecified vectors.
CVE-2010-5083	Modificada	Alta (7.5)	1.0%	—	Phpnuke Php-nuke Phpnuke WEB Links Module	14/2/2012	16/6/2026	SQL injection vulnerability in the Web_Links module for PHP-Nuke 8.0 allows remote attackers to execute arbitrary SQL commands via the url parameter in an Add action to modules.php.
CVE-2008-0879	Modificada	Alta (7.5)	1.1%	—	Phpnuke WEB Links Module	21/2/2008	16/6/2026	SQL injection vulnerability in modules.php in the Web_Links module for PHP-Nuke allows remote attackers to execute arbitrary SQL commands via the cid parameter in a viewlink action.
CVE-2007-5598	Modificada	Media (4.3)	1.4%	—	WEB Links Project WEB Links	19/10/2007	16/6/2026	Cross-site scripting (XSS) vulnerability in Weblinks for Drupal 4.7.x before 4.7.x-1.0 and 5.x before 5.x-1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors.
CVE-2006-6645	Modificada	Alta (7.5)	2.4%	—	Mxbb WEB Links	20/12/2006	16/6/2026	PHP remote file inclusion vulnerability in language/lang_english/lang_admin.php in the Web Links (mx_links) 2.05 and earlier module for mxBB allows remote attackers to execute arbitrary PHP code via a URL in the mx_root_path parameter.
CVE-2004-1957	Modificada	Baja (2.6)	4.6%	—	Postnuke^AI Postnuke Downloads Module^AI Postnuke WEB Links Module^AI	21/4/2004	16/6/2026	Multiple cross-site scripting (XSS) vulnerabilities in PostNuke 0.726 allows remote attackers to inject arbitrary web script or HTML via the (1) lid and query parameters to the Downloads module, (2) query parameter to the Web_links module, or (3) hlpfile parameter to openwindow.php.