CVE-2004-1830

2005-05-1004:00:00

mitre

www.cve.org

6.3 Medium

AI Score

Confidence

Low

0.026 Low

EPSS

Percentile

90.4%

JSON

error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid (1) language, (2) newlang, or (3) lang parameter, which leaks the pathname in a PHP error message.

References

marc.info/?l=bugtraq&m=107963064317560&w=2

secunia.com/advisories/11164

www.osvdb.org/4386

www.securityfocus.com/bid/9911

exchange.xforce.ibmcloud.com/vulnerabilities/15524