4Nalbum Module
Approved changes feed: RSS · Atom
cpe:2.3:a:warpspeed:4nalbum_module:0.92:*:*:*:*:*:*:*
part: a version: 0.92 update: *
| Vendor | Warpspeed (b6b05428-0b13-55d1-a669-753862efc968) |
|---|---|
| Product | 4Nalbum Module (f9c8bc05-2bf5-5dc2-9637-b436d5996d68) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2004-1821 |
vulnerable | 2026-06-08 04:48:07.733887 |
Details available
SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations via the gid parameter.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:48.127Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1820 |
vulnerable | 2026-06-08 04:48:07.733585 |
Details available
PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on a remote web server that contains fileFunctions.php.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:48.508Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1819 |
vulnerable | 2026-06-08 04:48:07.733276 |
Details available
4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information via a direct request to displaycategory.php, which reveals the path in an error message.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:48.161Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2004-1818 |
not_vulnerable | 2026-06-08 04:48:07.732859 |
Details available
Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary script as other users by injecting arbitrary script into the z parameter.
Published: 2005-05-10T04:00:00.000Z
Updated: 2024-08-08T01:07:49.039Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.