Vulnerabilities > CVE-2004-1914
Attack vector
UNKNOWN Attack complexity
UNKNOWN Privileges required
UNKNOWN Confidentiality impact
UNKNOWN Integrity impact
UNKNOWN Availability impact
UNKNOWN Summary
SQL injection vulnerability in modules.php in NukeCalendar 1.1.a, as used in PHP-Nuke, allows remote attackers to execute arbitrary SQL commands via the eid parameter.
Vulnerable Configurations
| Part | Description | Count |
|---|---|---|
| Application | 1 | |
| Application | 1 |
Exploit-Db
| description | NukeCalendar 1.1 .a eid Parameter SQL Injection. CVE-2004-1914. Webapps exploit for php platform |
| id | EDB-ID:23933 |
| last seen | 2016-02-02 |
| modified | 2004-04-08 |
| published | 2004-04-08 |
| reporter | Janek Vind |
| source | https://www.exploit-db.com/download/23933/ |
| title | NukeCalendar 1.1.a - eid Parameter SQL Injection |