CVE Vulnerabilities

CVE-2004-2296

Published: Dec 31, 2004 | Modified: Jul 11, 2017
CVSS 3.x
N/A
Source:
NVD
CVSS 2.x
5 MEDIUM
AV:N/AC:L/Au:N/C:P/I:N/A:N
RedHat/V2
RedHat/V3
Ubuntu

The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which generates an error message.

Affected Software

Name Vendor Start Version End Version
Php-nuke Francisco_burzi 6.0 6.0
Php-nuke Francisco_burzi 6.5 6.5
Php-nuke Francisco_burzi 6.5_beta1 6.5_beta1
Php-nuke Francisco_burzi 6.5_final 6.5_final
Php-nuke Francisco_burzi 6.5_rc1 6.5_rc1
Php-nuke Francisco_burzi 6.5_rc2 6.5_rc2
Php-nuke Francisco_burzi 6.5_rc3 6.5_rc3
Php-nuke Francisco_burzi 6.6 6.6
Php-nuke Francisco_burzi 6.7 6.7
Php-nuke Francisco_burzi 6.9 6.9
Php-nuke Francisco_burzi 7.0 7.0
Php-nuke Francisco_burzi 7.0_final 7.0_final
Php-nuke Francisco_burzi 7.1 7.1
Php-nuke Francisco_burzi 7.2 7.2
Php-nuke Francisco_burzi 7.3 7.3

References