Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.0

PHP‑Nuke Video Gallery Module leaks server file path

CVE-2004-1971 · published 22 years ago
Summary

The Video Gallery module version 0.1 Beta 5 in PHP‑Nuke can reveal the complete directory path on the server when it receives a malformed catid or clipid request. This information can help an attacker learn where files are stored and plan further attacks. Apply the latest patch or upgrade the module to a version that hides internal paths.

Original advisory text
modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals th...
modules.php in PHP-Nuke Video Gallery Module 0.1 Beta 5 allows remote attackers to gain sensitive information via an HTTP request with an invalid (1) catid or (2) clipid parameter, which reveals the full path in an error message.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.0 Medium
Exploitation
1% chance of attack within 30 days
Timeline
Published26 Apr 2004
Updated4 Nov 2026
First seen29 Sep 2026
Sources
CVE-2004-1971 · NVD
Track software like this
Free during beta