PT-2004-2720 · Php Nuke · 4Nalbum

Janek Vind + 1 · Published 2004-03-15 · Updated 2017-07-11 · CVE-2004-1821

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions 4nalbum versions 0.92 for PHP-Nuke 6.5 through 7.0

Description The issue allows remote attackers to gain privileges or perform unauthorized database operations. This is achieved via the gid parameter.

Recommendations For 4nalbum version 0.92, avoid using the gid parameter in affected API endpoints until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2004-1821

Affected Products

4Nalbum

References · 7

• 🔥 https://exploit-db.com/exploits/23816 · Exploit
• http://secunia.com/advisories/11134 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-1821 · Security Note
• http://osvdb.org/4294 · Vendor Advisory
• http://securityfocus.com/bid/9881 · Vendor Advisory
• http://marc.info/?l=bugtraq&m=107937780222514&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15498 · Note