← Database

CVE-2004-1842

HIGH CVSS: 8.8 Published: 2004-12-31 Modified: 2026-06-16

Description

Cross-site request forgery (CSRF) vulnerability in Php-Nuke 6.x through 7.1.0 allows remote attackers to gain administrative privileges via an img tag with a URL to admin.php.

Affected Platforms

Phpnuke Php-Nuke

Weakness Type

CWE-352

References