Vulnerability in Rob Sutton Php-Nuke Event Calendar

CVE-2004-1528

The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HTTP request to (1) config.php, (2) index.php, or (3) submit.php, which reveal the full path in an error message.

EPSS: 0.015 (72.4th percentile) — read the EPSS interpretation.

Affected products

References