PT-2004-2738 · Php Nuke · Ms Analysis Module

Published 2004-03-22 · Updated 2016-10-18 · CVE-2004-1839

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions MS Analysis module version 2.0 for PHP-Nuke

Description The issue allows remote attackers to obtain sensitive information via a direct request to API endpoints such as "browsers.php", "mstrack.php", or "title.php", which reveal the full path in a PHP error message.

Recommendations For MS Analysis module version 2.0, consider restricting access to the "browsers.php", "mstrack.php", and "title.php" API endpoints to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2004-1839

Affected Products

Ms Analysis Module

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2004-1839 · Security Note
• http://securityfocus.com/bid/9946 · Vendor Advisory
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2004-1839 · Note
• http://marc.info/?l=bugtraq&m=108006319730976&w=2 · Note