Vulnerabilities > CVE-2004-1913
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
Cross-site scripting (XSS) vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to inject arbitrary web script or HTML via the eid parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 | |
| Application | 1 |
Exploit-Db
| description | NukeCalendar 1.1 .a eid Parameter XSS. CVE-2004-1913. Webapps exploit for php platform |
| id | EDB-ID:23932 |
| last seen | 2016-02-02 |
| modified | 2004-04-08 |
| published | 2004-04-08 |
| reporter | Janek Vind |
| source | https://www.exploit-db.com/download/23932/ |
| title | NukeCalendar 1.1.a - eid Parameter XSS |