PT-2004-2728 · Php Nuke+1 · Php-Nuke+1

Janek Vind + 1 · Publicado 2004-03-18 · Atualizado 2017-07-11 · CVE-2004-1829

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Gijza.net Error Manager version 2.1 for PHP-Nuke 6.0

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters, including the pagetitle or error parameters, as well as certain parameters in the error log.

Recommendations For Gijza.net Error Manager version 2.1, consider disabling the error log and restricting access to the error.php file until a patch is available. Avoid using the pagetitle and error parameters in the affected API endpoint until the issue is resolved.

Exploit

Correção

Identificadores relacionados

CVE-2004-1829

Produtos afetados

Gijza.Net Error Manager

Php-Nuke

Referências · 8

• 🔥 http://securityfocus.com/bid/9911 · Exploit
• 🔥 https://exploit-db.com/exploits/23845 · Exploit
• http://osvdb.org/4384 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15529 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2004-1829 · Nota de Segurança
• http://marc.info/?l=bugtraq&m=107963064317560&w=2 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15530 · Nota
• http://secunia.com/advisories/11164 · Nota