CVE-2004-1912: Francisco Burzi PHP-Nuke

Medium severity, CVSS 5.0. EPSS: 3.5% chance of exploitation in the next 30 days.

The (1) modules.php, (2) block-Calendar.php, (3) block-Calendar1.php, (4) block-Calendar_center.php scripts in NukeCalendar 1.1.a, as used in PHP-Nuke, allow remote attackers to obtain sensitive information via a URL with an invalid argument, which reveals the full path in an error message.

Affected products

• Francisco Burzi PHP-Nuke: version 8.0_final only
• Shiba-Design Nukecalendar: version 1.1.a only

Published 2004-12-31. Last modified 2026-06-16.