CVE-2004-1971

modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals the full path in an error message.

Score
CVSS 2.0 5.0 Medium
Status
Modified - cve@mitre.org
Published
2004-04-26
Last modified
2024-08-08

References