CVE-2004-2019: Medium severity Francisco Burzi PHP-Nuke vulnerability
Published Dec 31, 2004
·Updated
The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays the full path in a PHP error message.
Affected Software
15 affected components
Francisco Burzi PHP-Nuke=6.5_beta1
Francisco Burzi PHP-Nuke=6.5
Francisco Burzi PHP-Nuke=7.0
Francisco Burzi PHP-Nuke=7.2
Francisco Burzi PHP-Nuke=7.0_final
Francisco Burzi PHP-Nuke=6.5_rc2
Francisco Burzi PHP-Nuke=7.3
Francisco Burzi PHP-Nuke=6.5_rc3
Francisco Burzi PHP-Nuke=6.0
Francisco Burzi PHP-Nuke=6.5_final
Francisco Burzi PHP-Nuke=6.7
Francisco Burzi PHP-Nuke=6.6
Francisco Burzi PHP-Nuke=6.9
Francisco Burzi PHP-Nuke=7.1
Francisco Burzi PHP-Nuke=6.5_rc1
Event History
Dec 31, 2004
CVE Published
05:00 AM
May 10, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2019?
CVE-2004-2019 is classified as a medium severity vulnerability that exposes sensitive information.
2
How do I fix CVE-2004-2019?
To fix CVE-2004-2019, upgrade to a patched version of PHP-Nuke beyond 7.3.
3
What versions of PHP-Nuke are affected by CVE-2004-2019?
Versions 6.x through 7.3 of PHP-Nuke are affected by CVE-2004-2019.
4
What type of information can an attacker obtain from CVE-2004-2019?
An attacker can obtain the full file path from a PHP error message due to CVE-2004-2019.
5
Is CVE-2004-2019 a remote exploit?
Yes, CVE-2004-2019 allows remote attackers to exploit the vulnerability via an invalid parameter.