Vulnerabilities

TI-2004-01788 CVE-2004-1914 · GHSA-38pq-79pv-7gpm

SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke…

LOW 36

SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execute arbitrary SQL commands via the eid parameter.

CVSS 2.0HIGH 7.5 Network No auth Interaction — EPSS 0.01746 Published 2005-05-10 No fix listed

TI-2004-01787 CVE-2004-1913 · GHSA-j746-mrw2-7366

Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in…

LOW 24

Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to inject arbitrary web script or HTML via the eid parameter.

CVSS 2.0MEDIUM 4.3 Network No auth Interaction — EPSS 0.01733 Published 2005-05-10 No fix listed

TI-2004-01786 CVE-2004-1912 · GHSA-m9hc-vpmc-234m

The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4)…

LOW 29

The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCalendar 1.1.a, as used in PHP-Nuke, allow remote attackers to obtain sensitive information via a URL wit…

CVSS 2.0MEDIUM 5.0 Network No auth Interaction — EPSS 0.03514 Published 2005-05-10 No fix listed

Vulnerabilities

Filters

SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke…

Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in…

The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4)…