Sign-up

ID

VAR-200405-0058


CVE

CVE-2004-1999


TITLE

Php-Nuke Cross-site scripting vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200405-044

DESCRIPTION

Cross-site scripting (XSS) vulnerability in the Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to inject arbitrary HTML and web script via the (1) ttitle or (2) sid parameters to modules.php. PHP-Nuke is prone to a cross-site scripting vulnerability

Trust: 1.26

sources: NVD: CVE-2004-1999 // BID: 82560 // VULHUB: VHN-10427

AFFECTED PRODUCTS

vendor:francisco burzimodel:php-nukescope:eqversion:6.7

Trust: 1.6

vendor:francisco burzimodel:php-nukescope:eqversion:7.0

Trust: 1.6

vendor:francisco burzimodel:php-nukescope:eqversion:6.8

Trust: 1.6

vendor:francisco burzimodel:php-nukescope:eqversion:7.2

Trust: 1.6

vendor:francisco burzimodel:php-nukescope:eqversion:6.0

Trust: 1.6

vendor:francisco burzimodel:php-nukescope:eqversion:6.6

Trust: 1.6

vendor:francisco burzimodel:php-nukescope:eqversion:6.5

Trust: 1.6

vendor:francisco burzimodel:php-nukescope:eqversion:7.1

Trust: 1.6

vendor:francisco burzimodel:php-nukescope:eqversion:6.9

Trust: 1.6

vendor:franciscomodel:burzi php-nukescope:eqversion:7.2

Trust: 0.3

vendor:franciscomodel:burzi php-nukescope:eqversion:7.1

Trust: 0.3

vendor:franciscomodel:burzi php-nukescope:eqversion:7.0

Trust: 0.3

vendor:franciscomodel:burzi php-nukescope:eqversion:6.9

Trust: 0.3

vendor:franciscomodel:burzi php-nukescope:eqversion:6.8

Trust: 0.3

vendor:franciscomodel:burzi php-nukescope:eqversion:6.7

Trust: 0.3

vendor:franciscomodel:burzi php-nukescope:eqversion:6.6

Trust: 0.3

vendor:franciscomodel:burzi php-nukescope:eqversion:6.5

Trust: 0.3

vendor:franciscomodel:burzi php-nukescope:eqversion:6.0

Trust: 0.3

sources: BID: 82560 // CNNVD: CNNVD-200405-044 // NVD: CVE-2004-1999

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2004-1999
value: MEDIUM

Trust: 1.0

CNNVD: CNNVD-200405-044
value: MEDIUM

Trust: 0.6

VULHUB: VHN-10427
value: MEDIUM

Trust: 0.1

nvd@nist.gov: CVE-2004-1999
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-10427
severity: MEDIUM
baseScore: 4.3
vectorString: AV:N/AC:M/AU:N/C:N/I:P/A:N
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: NONE
integrityImpact: PARTIAL
availabilityImpact: NONE
exploitabilityScore: 8.6
impactScore: 2.9
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-10427 // CNNVD: CNNVD-200405-044 // NVD: CVE-2004-1999

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2004-1999

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200405-044

TYPE

XSS

Trust: 0.6

sources: CNNVD: CNNVD-200405-044

EXTERNAL IDS

db:NVDid:CVE-2004-1999

Trust: 2.0

db:SECUNIAid:11553

Trust: 1.7

db:XFid:16073

Trust: 0.9

db:CNNVDid:CNNVD-200405-044

Trust: 0.7

db:BUGTRAQid:20040505 [WARAXE-2004-SA#027 - ONCE AGAIN - CRITICAL VULNERABILITIES IN PHPNUKE 6.X - 7.2]

Trust: 0.6

db:BIDid:82560

Trust: 0.4

db:VULHUBid:VHN-10427

Trust: 0.1

sources: VULHUB: VHN-10427 // BID: 82560 // CNNVD: CNNVD-200405-044 // NVD: CVE-2004-1999

REFERENCES

url:http://www.waraxe.us/index.php?modname=sa&id=27

Trust: 1.9

url:http://secunia.com/advisories/11553

Trust: 1.7

url:https://exchange.xforce.ibmcloud.com/vulnerabilities/16073

Trust: 1.1

url:http://marc.info/?l=bugtraq&m=108378804809891&w=2

Trust: 1.0

url:http://marc.theaimsgroup.com/?l=bugtraq&m=108378804809891&w=2

Trust: 0.9

url:http://xforce.iss.net/xforce/xfdb/16073

Trust: 0.9

url:http://marc.info/?l=bugtraq&m=108378804809891&w=2

Trust: 0.1

url:http://www.waraxe.us/index.php?modname=sa&id=27

Trust: 0.1

sources: VULHUB: VHN-10427 // BID: 82560 // CNNVD: CNNVD-200405-044 // NVD: CVE-2004-1999

CREDITS

Unknown

Trust: 0.3

sources: BID: 82560

SOURCES

db:VULHUBid:VHN-10427
db:BIDid:82560
db:CNNVDid:CNNVD-200405-044
db:NVDid:CVE-2004-1999

LAST UPDATE DATE

2024-08-14T14:42:21.379000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-10427date:2017-07-11T00:00:00
db:BIDid:82560date:2004-05-05T00:00:00
db:CNNVDid:CNNVD-200405-044date:2006-09-22T00:00:00
db:NVDid:CVE-2004-1999date:2017-07-11T01:31:32.327

SOURCES RELEASE DATE

db:VULHUBid:VHN-10427date:2004-05-05T00:00:00
db:BIDid:82560date:2004-05-05T00:00:00
db:CNNVDid:CNNVD-200405-044date:2004-05-05T00:00:00
db:NVDid:CVE-2004-1999date:2004-05-05T04:00:00