CVE-2019-7726: Nukeviet

Critical severity, CVSS 9.8. EPSS: 2.3% chance of exploitation in the next 30 days.

modules/banners/funcs/click.php in NukeViet before 4.3.04 has a SQL INSERT statement with raw header data from an HTTP request (e.g., Referer and User-Agent).

Affected products

• Nukeviet Nukeviet: before 4.3.04 (fixed in 4.3.04)

Published 2020-12-31. Last modified 2026-06-17.