Vulnerabilities

TI-2004-01696 CVE-2004-1821 · GHSA-76hg-76m7-348w

SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote…

LOW 35

SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations via the gid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01171 Published 2005-05-10 No fix listed

TI-2004-01695 CVE-2004-1820 · GHSA-m84f-vp78-8mq6

PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for…

LOW 38

PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on…

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.02981 Published 2005-05-10 No fix listed

TI-2004-01694 CVE-2004-1819 · GHSA-g9ww-rwpm-5j7q

4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive…

LOW 26

4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information via a direct request to displaycategory.php, which reveals the path in an error message.

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.01548 Published 2005-05-10 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote…

PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for…

4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive…