PT-2004-2438 · Php Nuke · Php-Nuke Event Calendar Module

Janek Vind + 1 · Publicado 2004-12-31 · Atualizado 2017-07-11 · CVE-2004-1530

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP-Nuke Event Calendar module version 2.13

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the eid or cid parameters.

Recommendations For PHP-Nuke Event Calendar module version 2.13, consider restricting access to the vulnerable module to minimize the risk of exploitation. Avoid using the parameters eid or cid in the affected API endpoint until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2004-1530

Produtos afetados

Php-Nuke Event Calendar Module

Referências · 6

• 🔥 http://securityfocus.com/bid/11693 · Exploit
• http://marc.info/?l=bugtraq&m=110064626111756&w=2 · Nota
• http://waraxe.us/index.php?modname=sa&id=38 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1530 · Nota de Segurança
• http://secunia.com/advisories/13213 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18104 · Nota