CVE-2004-2296

Summary

The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which generates an error message.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://secunia.com/advisories/11852
• http://www.securityfocus.com/archive/1/365865
• http://www.securityfocus.com/bid/10524
• http://www.osvdb.org/7001
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16408

References

• http://secunia.com/advisories/11852
• http://www.securityfocus.com/archive/1/365865
• http://www.securityfocus.com/bid/10524
• http://www.osvdb.org/7001
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16408

• ←Previous
• Next→