PT-2004-2738 · Php Nuke · Ms Analysis Module
CVE-2004-1839
·
Published
2004-03-22
·
Updated
2016-10-18
CVSS v2.0
5.0
Medium
| Vector | AV:N/AC:L/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
MS Analysis module version 2.0 for PHP-Nuke
Description
The issue allows remote attackers to obtain sensitive information via a direct request to API endpoints such as "browsers.php", "mstrack.php", or "title.php", which reveal the full path in a PHP error message.
Recommendations
For MS Analysis module version 2.0, consider restricting access to the "browsers.php", "mstrack.php", and "title.php" API endpoints to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Ms Analysis Module