4nalbum Module

4nalbum_module

Vendor: Warpspeed • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2004-1821 1Warpspeed 14nalbum Module Apr 16, 2026 Mar 15, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to gain privileges or perform unauthorized database operations via the gid parameter.
CVE-2004-1820 1Warpspeed 14nalbum Module Apr 16, 2026 Mar 15, 2004 N/A· v4 N/A· v3 7.5 HIGH· v2 PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on...Show more PHP remote file inclusion vulnerability in displaycategory.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary PHP code by modifying the basepath parameter to reference a URL on a remote web server that contains fileFunctions.php.Show less
CVE-2004-1819 1Warpspeed 14nalbum Module Apr 16, 2026 Mar 15, 2004 N/A· v4 N/A· v3 5.0 MEDIUM· v2 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to obtain sensitive information via a direct request to displaycategory.php, which reveals the path in an error message.