CVE-2004-1819: Medium severity Warpspeed 4nalbum Module vulnerability
4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information via a direct request to displaycategory.php, which reveals the path in an error message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-1819?
CVE-2004-1819 is considered a moderate severity vulnerability due to the potential exposure of sensitive information.
How do I fix CVE-2004-1819?
To fix CVE-2004-1819, it is recommended to upgrade the 4nalbum module to a version that is not vulnerable or apply appropriate access controls.
What type of information is disclosed by CVE-2004-1819?
CVE-2004-1819 can disclose sensitive path information through error messages when accessing displaycategory.php directly.
Which versions of 4nalbum are affected by CVE-2004-1819?
CVE-2004-1819 affects 4nalbum version 0.92 in conjunction with PHP-Nuke versions 6.5 through 7.0.
Is CVE-2004-1819 exploitable remotely?
Yes, CVE-2004-1819 can be exploited remotely by attackers who can send direct requests to the vulnerable script.