CVE-2004-1818

Cross-site scripting (XSS) vulnerability in nmimage.php in 4nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote attackers to execute arbitrary script as other users by injecting arbitrary script into the z parameter.

• http://marc.info/?l=bugtraq&m=107937780222514&w=2
• http://secunia.com/advisories/11134Vendor Advisory
• http://www.osvdb.org/4293Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/9881Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15497
• http://marc.info/?l=bugtraq&m=107937780222514&w=2
• http://secunia.com/advisories/11134Vendor Advisory
• http://www.osvdb.org/4293Exploit, Vendor Advisory
• http://www.securityfocus.com/bid/9881Exploit, Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/15497

Published

Mar 15, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-1812Multiple stack-based buffer overflows in Agent Common Servic…
• CVE-2004-1813VocalTec VGW4/8 Gateway 8.0 allows remote attackers to bypas…
• CVE-2004-1814Directory traversal vulnerability in VocalTec VGW4/8 Gateway…
• CVE-2004-1815Unknown vulnerability in ColdFusion MX 6.0 and 6.1, and JRun…
• CVE-2004-1816Unknown vulnerability in Sun Java System Application Server …
• CVE-2004-1817Cross-site scripting (XSS) vulnerability in modules.php in P…
• CVE-2004-18194nalbum 0.92 for PHP-Nuke 6.5 through 7.0 allows remote atta…
• CVE-2004-1820PHP remote file inclusion vulnerability in displaycategory.p…
• CVE-2004-1821SQL injection vulnerability in 4nalbum 0.92 for PHP-Nuke 6.5…
• CVE-2004-1822Multiple cross-site scripting (XSS) vulnerabilities in Phoru…
• CVE-2004-1823Multiple cross-site scripting (XSS) vulnerabilities in Jelso…
• CVE-2004-1824Cross-site scripting (XSS) vulnerability in Jelsoft vBulleti…