Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2004-1818

Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary script as other users by injecting arbitrary script into the z parameter.

CVSS 2.0 · 6.8 Medium EPSS 2.0% KEV · Not listed
Vendors
Warpspeed
Products
4nalbum Module
CVE-2004-1819

4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information via a direct request to displaycategory.php, which reveals the path in an error message.

CVSS 2.0 · 5.0 Medium EPSS 1.5% KEV · Not listed
Vendors
Warpspeed
Products
4nalbum Module
CVE-2004-1820

PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on a remote web server that contains fileFunctions.php.

CVSS 2.0 · 7.5 High EPSS 3.0% KEV · Not listed
Vendors
Warpspeed
Products
4nalbum Module
CVE-2004-1821

SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations via the gid parameter.

CVSS 2.0 · 7.5 High EPSS 1.2% KEV · Not listed
Vendors
Warpspeed
Products
4nalbum Module