PHP-Nuke version 6.x through 7.2 suffer from various SQL injection and cross site scripting vulnerabilities.