Lucene search

[email protected]CVE-2004-2020

HistoryMay 10, 2005 - 4:00 a.m.

CVE-2004-2020

2005-05-1004:00:00

[email protected]

web.nvd.nist.gov

cve-2004-2020

cross-site scripting

xss

php-nuke

remote attackers

html injection

web script injection

nvd

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.1%

JSON

Multiple cross-site scripting (XSS) vulnerabilities in Php-Nuke 6.x through 7.3 allow remote attackers to inject arbitrary HTML or web script into the (1) optionbox parameter in the News module, (2) date parameter in the Statistics module, (3) year, month, and month_1 parameters in the Stories_Archive module, (4) mode, order, and thold parameters in the Surveys module, or (5) a SQL statement to index.php, as processed by mainfile.php.

Affected configurations

NVD

Node

francisco_burziphp-nukeMatch6.0

francisco_burziphp-nukeMatch6.5

francisco_burziphp-nukeMatch6.5_beta1

francisco_burziphp-nukeMatch6.5_final

francisco_burziphp-nukeMatch6.5_rc1

francisco_burziphp-nukeMatch6.5_rc2

francisco_burziphp-nukeMatch6.5_rc3

francisco_burziphp-nukeMatch6.6

francisco_burziphp-nukeMatch6.7

francisco_burziphp-nukeMatch6.9

francisco_burziphp-nukeMatch7.0

francisco_burziphp-nukeMatch7.0_final

francisco_burziphp-nukeMatch7.1

francisco_burziphp-nukeMatch7.2

francisco_burziphp-nukeMatch7.3

CPENameOperatorVersion
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.0
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_beta1
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_final
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_rc1
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_rc2
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.5_rc3
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.6
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.7
francisco_burzi:php-nukefrancisco burzi php-nukeeq6.9

CPE	Name	Operator	Version
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.0
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_beta1
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_final
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_rc1
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_rc2
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.5_rc3
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.6
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.7
francisco_burzi:php-nuke	francisco burzi php-nuke	eq	6.9

Rows per page:

1-10 of 151

References

marc.info/?l=bugtraq&m=108482957715299&w=2

secunia.com/advisories/11625

www.osvdb.org/6225

www.osvdb.org/6226

www.securityfocus.com/bid/10367

www.waraxe.us/index.php?modname=sa&id=29

exchange.xforce.ibmcloud.com/vulnerabilities/16172

4.3 Medium

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:M/Au:N/C:N/I:P/A:N

6.5 Medium

AI Score

Confidence

High

0.011 Low

EPSS

Percentile

84.1%

JSON

Related for CVE-2004-2020

cvelist1 nvd1