CVE-2004-2296: Medium severity Francisco Burzi PHP-Nuke vulnerability
Published Dec 31, 2004
·Updated
The previewreview function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which generates an error message.
Affected Software
15 affected components
Francisco Burzi PHP-Nuke=6.0
Francisco Burzi PHP-Nuke=6.5
Francisco Burzi PHP-Nuke=6.5_beta1
Francisco Burzi PHP-Nuke=6.5_final
Francisco Burzi PHP-Nuke=6.5_rc1
Francisco Burzi PHP-Nuke=6.5_rc2
Francisco Burzi PHP-Nuke=6.5_rc3
Francisco Burzi PHP-Nuke=6.6
Francisco Burzi PHP-Nuke=6.7
Francisco Burzi PHP-Nuke=6.9
Francisco Burzi PHP-Nuke=7.0
Francisco Burzi PHP-Nuke=7.0_final
Francisco Burzi PHP-Nuke=7.1
Francisco Burzi PHP-Nuke=7.2
Francisco Burzi PHP-Nuke=7.3
Event History
Dec 31, 2004
CVE Published
05:00 AM
Aug 4, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2004-2296?
CVE-2004-2296 has a moderate severity level due to the potential for information disclosure.
2
How do I fix CVE-2004-2296?
Fix CVE-2004-2296 by upgrading to a later version of PHP-Nuke that resolves this vulnerability.
3
Is CVE-2004-2296 exploitable remotely?
Yes, CVE-2004-2296 can be exploited remotely by attackers to gain sensitive information.
4
Which versions of PHP-Nuke are affected by CVE-2004-2296?
CVE-2004-2296 affects PHP-Nuke versions 6.0 to 7.3, specifically on Windows systems.
5
What type of information can be exposed by CVE-2004-2296?
CVE-2004-2296 can expose sensitive information through error messages resulting from an invalid date parameter.