← Database

CVE-2004-1818

MEDIUM CVSS: 6.8 Published: 2004-03-15 Modified: 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary script as other users by injecting arbitrary script into the z parameter.

Affected Platforms

Warpspeed 4Nalbum Module

Weakness Type

NVD-CWE-Other

References