Unscored CVE-2004-1971 EUVD-2004-1963GHSA-4v44-9qpg-fr3q

modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an i…

Published May 10, 2005 · Updated Aug 8, 2024 · Assigned by mitre

Description

modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals the full path in an error message.

References

20040426 Multiple vulnerabilities PHP-Nuke Video Gallery Module for PHP-Nuke mailing-list
video-gallery-error-path-disclosure(15978) vdb-entry