PT-2004-2438 · Php Nuke · Php-Nuke Event Calendar Module

Janek Vind + 1 · Published 2004-12-31 · Updated 2017-07-11 · CVE-2004-1530

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PHP-Nuke Event Calendar module version 2.13

Description The issue allows remote attackers to execute arbitrary SQL commands. This is achieved via the eid or cid parameters.

Recommendations For PHP-Nuke Event Calendar module version 2.13, consider restricting access to the vulnerable module to minimize the risk of exploitation. Avoid using the parameters eid or cid in the affected API endpoint until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2004-1530

Affected Products

Php-Nuke Event Calendar Module

References · 6

• 🔥 http://securityfocus.com/bid/11693 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1530 · Security Note
• http://marc.info/?l=bugtraq&m=110064626111756&w=2 · Note
• http://waraxe.us/index.php?modname=sa&id=38 · Note
• http://secunia.com/advisories/13213 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18104 · Note