PT-2004-2728 · Php Nuke+1 · Php-Nuke+1

Janek Vind + 1 · Published 2004-03-18 · Updated 2017-07-11 · CVE-2004-1829

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions Gijza.net Error Manager version 2.1 for PHP-Nuke 6.0

Description The issue concerns multiple cross-site scripting (XSS) vulnerabilities. These vulnerabilities allow remote attackers to inject arbitrary web script or HTML via specific parameters, including the pagetitle or error parameters, as well as certain parameters in the error log.

Recommendations For Gijza.net Error Manager version 2.1, consider disabling the error log and restricting access to the error.php file until a patch is available. Avoid using the pagetitle and error parameters in the affected API endpoint until the issue is resolved.

Exploit

Fix

Related Identifiers

CVE-2004-1829

Affected Products

Gijza.Net Error Manager

Php-Nuke

References · 8

• 🔥 http://securityfocus.com/bid/9911 · Exploit
• 🔥 https://exploit-db.com/exploits/23845 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2004-1829 · Security Note
• http://osvdb.org/4384 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15529 · Note
• http://marc.info/?l=bugtraq&m=107963064317560&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15530 · Note
• http://secunia.com/advisories/11164 · Note