CVE:CVE-2004-1912
CNNVD:CNNVD-200412-640
用于PHP-Nuke的NukeCalendar 1.1.a版本中的(1)modules.php、(2)block-Calendar.php、(3)block-Calendar1.php、(4)block-Calendar_center.php脚本存在漏洞。远程攻击者可以借助带有无效参数的URL获得敏感信息，该漏洞在出错消息中泄露了全部路径。
solution:Upgrade francisco_burzi php-nuke to a higher version than 8.0_final,and avoid the version 8.0_final; Upgrade shiba-design nukecalendar to a higher version than 1.1.a,and avoid the version 1.1.a