CVE-2004-1528: The Event Calendar module 2.13 for PHP-Nuke allows remote attackers to gain sensitive information via an HT...

Security readout for executives and security teams

CVE-2004-1528 is an information disclosure issue in the Event Calendar 2.13 module for PHP-Nuke. Certain direct HTTP requests can cause error messages that reveal the server’s full filesystem path. This is not described as code execution, but it can help attackers map legacy hosting environments. Exposure is likely limited to legacy PHP-Nuke deployments that still run Event Calendar module 2.13 and expose the affected PHP files publicly. Modern stacks are unlikely to be affected unless old PHP-Nuke code remains reachable. Low priority unless the affected legacy module is internet-facing. It does not indicate system takeover by itself, but exposed paths reduce attacker effort during broader attacks. Prioritize removal or retirement where PHP-Nuke remains online. Mitigation focus: Identify whether PHP-Nuke Event Calendar 2.13 is still deployed.; Check archived vendor or distribution guidance for a fixed release.; Remove or disable the module if no supported fix exists..

Prepared

Jun 30, 2026, 00:39 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.