CVE-2004-1817

Cross-site scripting (XSS) vulnerability in modules.php in Php-Nuke 7.1.0 allows remote attackers to inject arbitrary web script or HTML via the (1) Your Name field, (2) e-mail field, (3) nicname field, (4) fname parameter, (5) ratenum parameter, or (6) search field.

• http://marc.info/?l=bugtraq&m=107937752811633&w=2
• http://secunia.com/advisories/11135Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/9879Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15491
• http://marc.info/?l=bugtraq&m=107937752811633&w=2
• http://secunia.com/advisories/11135Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/9879Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15491

Published

Mar 15, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1811The SSL HTTP Server in HP Web-enabled Management Software 5.…
• CVE-2004-1812Multiple stack-based buffer overflows in Agent Common Servic…
• CVE-2004-1813VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypas…
• CVE-2004-1814Directory traversal vulnerability in VocalTec VGW4/8 Gateway…
• CVE-2004-1815Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun…
• CVE-2004-1816Unknown vulnerability in Sun Java System Application Server …
• CVE-2004-1818Cross-site scripting (XSS) vulnerability in nmimage.php in 4…
• CVE-2004-18194nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote atta…
• CVE-2004-1820PHP remote file inclusion vulnerability in displaycategory.p…
• CVE-2004-1821SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5…
• CVE-2004-1822Multiple cross-site scripting (XSS) vulnerabilities in Phoru…
• CVE-2004-1823Multiple cross-site scripting (XSS) vulnerabilities in Jelso…