CVE-2007-1061: Francisco Burzi PHP-Nuke

Medium severity, CVSS 6.8. EPSS: 61.8% chance of exploitation in the next 30 days.

SQL injection vulnerability in index.php in Francisco Burzi PHP-Nuke 8.0 Final and earlier, when the "HTTP Referers" block is enabled, allows remote attackers to execute arbitrary SQL commands via the HTTP Referer header (HTTP_REFERER variable).

Affected products

• Francisco Burzi PHP-Nuke: up to and including 8.0_final

Published 2007-02-22. Last modified 2026-06-16.