CVE-2004-1529

Severity: medium (CVSS 4.3 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 1.4% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2004-12-31 · updated 2026-06-16

Description

Cross-site scripting (XSS) vulnerability in the Event Calendar module 2.13 for PHP-Nuke allows remote attackers to execute arbitrary web script via the (1) type, (2) day, (3) month, or (4) year parameters in a Preview operation, or (5) event comments.

Affected products

Rob Sutton Php-Nuke Event Calendar: 2.13

References

http://marc.info/?l=bugtraq&m=110064626111756&w=2
http://secunia.com/advisories/13213
http://www.securityfocus.com/bid/11693
http://www.waraxe.us/index.php?modname=sa&id=38
https://exchange.xforce.ibmcloud.com/vulnerabilities/18106
https://exchange.xforce.ibmcloud.com/vulnerabilities/18107
http://marc.info/?l=bugtraq&m=110064626111756&w=2
http://secunia.com/advisories/13213
http://www.securityfocus.com/bid/11693
http://www.waraxe.us/index.php?modname=sa&id=38
https://exchange.xforce.ibmcloud.com/vulnerabilities/18106
https://exchange.xforce.ibmcloud.com/vulnerabilities/18107

Get alerted when CVE-2004-1529 or the next vulnerability affects your stack