CVE-2004-1829 Multiple cross-site scripting (XSS) vulnerabilities in error.php in Gijza.net Error Manager 2.1 for PHP-Nuke 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) pagetitle or....
MediumCVSS 4.3
EPSS 1.9%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Multiple cross-site scripting (XSS) vulnerabilities in error.php in Gijza.net Error Manager 2.1 for PHP-Nuke 6.0 allow remote attackers to inject arbitrary web script or HTML via the (1) pagetitle or (2) error parameters, or (3) certain parameters in the error log.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| error manager php-nuke module | = 2.1 | No fix listed |
References
- 20040318 [waraxe-2004-SA#010 - Multiple vulnerabilities in Error Manager mailing-list
- 11164 third-party-advisory
- 4384 vdb-entry
- 9911 exploit vdb-entry vendor-advisory
- errormanager-error-xss(15529) vdb-entry
- errormanager-error-command-execution(15530) vdb-entry