Show filters
48 Total Results
Displaying 41-48 of 48
Sort by:
Attacker Value
Unknown
CVE-2004-1988
Disclosure Date: April 30, 2004 (last updated February 22, 2025)
PHP remote file inclusion vulnerability in init.inc.php in Coppermine Photo Gallery 1.2.0 RC4 allows remote attackers to execute arbitrary PHP code by modifying the CPG_M_DIR to reference a URL on a remote web server that contains functions.inc.php.
0
Attacker Value
Unknown
CVE-2004-1929
Disclosure Date: April 13, 2004 (last updated February 22, 2025)
SQL injection vulnerability in the bblogin function in functions.php in PHP-Nuke 6.x through 7.2 allows remote attackers to bypass authentication and gain access by injecting base64-encoded SQL code into the user parameter.
0
Attacker Value
Unknown
CVE-2004-1932
Disclosure Date: April 12, 2004 (last updated February 22, 2025)
SQL injection vulnerability in (1) auth.php and (2) admin.php in PHP-Nuke 6.x through 7.2 allows remote attackers to execute arbitrary SQL code and create an administrator account via base64-encoded SQL in the admin parameter.
0
Attacker Value
Unknown
CVE-2004-1930
Disclosure Date: April 12, 2004 (last updated February 22, 2025)
Cross-site scripting (XSS) vulnerability in the cookiedecode function in mainfile.php for PHP-Nuke 6.x through 7.2, when themes are used, allows remote attackers to inject arbitrary web script or HTML via a base64-encoded user parameter or cookie.
0
Attacker Value
Unknown
CVE-2004-1986
Disclosure Date: April 04, 2004 (last updated February 22, 2025)
Directory traversal vulnerability in modules.php in Coppermine Photo Gallery 1.2.2b and 1.2.0 RC4 allows remote attackers with administrative privileges to read arbitrary files via a .. (dot dot) in the startdir parameter.
0
Attacker Value
Unknown
CVE-2004-1840
Disclosure Date: March 22, 2004 (last updated February 22, 2025)
Multiple cross-site scripting (XSS) vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote attackers to inject arbitrary web script or HTML via the (1) screen parameter to modules.php, (2) module_name parameter to title.php, (3) sortby parameter to modules.php, or (4) overview parameter to modules.php.
0
Attacker Value
Unknown
CVE-2004-1839
Disclosure Date: March 22, 2004 (last updated February 22, 2025)
MS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a direct request to (1) browsers.php, (2) mstrack.php, or (3) title.php, which reveal the full path in a PHP error message.
0
Attacker Value
Unknown
CVE-2003-1526
Disclosure Date: December 31, 2003 (last updated February 22, 2025)
PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3) > in the search field, which reveals the path in an error message.
0
