CVE-2004-2293

Multiple cross-site scripting (XSS) vulnerabilities in PHP-Nuke 6.0 to 7.3 allow remote attackers to inject arbitrary web script or HTML via the (1) eid parameter or (2) query parameter to the Encyclopedia module, (3) preview_review function in the Reviews module as demonstrated by the url, cover, rlanguage, and hits parameters, or (4) savecomment function in the Reviews module, as demonstrated using the uname parameter. NOTE: the Faq/categories and Encyclopedia/ltr issues are already covered by CVE-2005-1023.

• http://secunia.com/advisories/11852Vendor Advisory
• http://www.osvdb.org/6997Exploit
• http://www.osvdb.org/6998Exploit
• http://www.osvdb.org/6999Exploit
• http://www.securityfocus.com/archive/1/365865Exploit
• http://www.securityfocus.com/bid/10524Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16406
• http://secunia.com/advisories/11852Vendor Advisory
• http://www.osvdb.org/6997Exploit
• http://www.osvdb.org/6998Exploit
• http://www.osvdb.org/6999Exploit
• http://www.securityfocus.com/archive/1/365865Exploit
• http://www.securityfocus.com/bid/10524Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16406

Published

Dec 31, 2004

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2004-2287Directory traversal vulnerability in explorer.php in DSM Lig…
• CVE-2004-2288Cross-site scripting (XSS) vulnerability in index.php in Jel…
• CVE-2004-2289Microsoft Windows XP Explorer allows local users to execute …
• CVE-2004-2290Microsoft Windows XP Explorer allows attackers to execute ar…
• CVE-2004-2291Microsoft Windows Internet Explorer 5.5 and 6.0 allows remot…
• CVE-2004-2292Buffer overflow in Alt-N MDaemon 7.0.1 allows remote attacke…
• CVE-2004-2294Canonicalize-before-filter error in the send_review function…
• CVE-2004-2295SQL injection vulnerability in the Reviews module in PHP-Nuk…
• CVE-2004-2296The preview_review function in the Reviews module in PHP-Nuk…
• CVE-2004-2297The Reviews module in PHP-Nuke 6.0 to 7.3 allows remote atta…
• CVE-2004-2298Novell Internet Messaging System (NIMS) 2.6 and 3.0, and Net…
• CVE-2004-2299Buffer overflow in Omnicron OmniHTTPd 3.0a and earlier allow…