CVE-2004-1839: Medium severity francisco burzi php-nuke vulnerability
Published Mar 22, 2004
·Updated
MS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a direct request to (1) browsers.php, (2) mstrack.php, or (3) title.php, which reveal the full path in a PHP error message.
Affected Software
11 affected components
Francisco Burzi PHP-Nuke=6.5_beta1
Francisco Burzi PHP-Nuke=6.5
Francisco Burzi PHP-Nuke=7.0
Francisco Burzi PHP-Nuke=7.0_final
Francisco Burzi PHP-Nuke=6.5_rc2
Francisco Burzi PHP-Nuke=6.5_rc3
Francisco Burzi PHP-Nuke=6.5_final
Francisco Burzi PHP-Nuke=6.7
Francisco Burzi PHP-Nuke=6.6
Francisco Burzi PHP-Nuke=6.9
Francisco Burzi PHP-Nuke=6.5_rc1
Event History
Mar 22, 2004
CVE Published
05:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-1839?
CVE-2004-1839 is considered a medium severity vulnerability due to the information disclosure it causes.
2
How do I fix CVE-2004-1839?
To fix CVE-2004-1839, upgrade your PHP-Nuke installation to a patched version that resolves the vulnerability.
3
What kind of information is exposed by CVE-2004-1839?
CVE-2004-1839 allows attackers to obtain the full server path through PHP error messages.
4
Which versions of PHP-Nuke are affected by CVE-2004-1839?
CVE-2004-1839 affects PHP-Nuke versions 6.5 through 7.0_final, including multiple release candidates and final versions.
5
What components are specifically vulnerable in CVE-2004-1839?
CVE-2004-1839 specifically impacts the browsers.php, mstrack.php, and title.php components of PHP-Nuke.