CVE-2004-1839 — Burzi Php-nuke vulnerability

3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.0%
top 96.49%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Francisco Burzi Php-nuke
Timeline
PublishedMar 22
Latest updateApr 29

Description

MS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a direct request to (1) browsers.php, (2) mstrack.php, or (3) title.php, which reveal the full path in a PHP error message.

CVSS vector

AV:N/AC:L/C:P/I:N/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

▶NVDfrancisco_burzi/php-nuke11 versions+10

🔴Vulnerability Details

2
GHSA
GHSA-j6m7-pmxf-w39j: MS Analysis module 2↗2022-04-29
▶
CVEList
CVE-2004-1839: MS Analysis module 2↗2005-05-10
▶
CVE-2004-1839 — Francisco Burzi Php-nuke vulnerability | cvebase