CVE-2004-1840: Multiple cross-site scripting (XSS) vulnerabilities in MS Analysis module 2.0 for PHP-Nuke allows remote at...

Security readout for executives and security teams

CVE-2004-1840 is a cross-site scripting issue in MS Analysis module 2.0 for PHP-Nuke. A remote attacker could inject script or HTML through specific request parameters. Business risk is mainly to legacy public PHP-Nuke sites, where browser-side compromise could affect users or administrators. Exposure is most likely on legacy PHP-Nuke deployments that still run the MS Analysis 2.0 module on public routes. Modern environments are unlikely affected unless they retain this specific historical module. Treat this as a legacy exposure cleanup item unless the affected module is internet-facing or administrator-accessible. Prioritize confirmation quickly because unsupported PHP-Nuke components can carry accumulated risk beyond this CVE. Mitigation focus: Inventory PHP-Nuke sites for MS Analysis module 2.0.; Check vendor or maintainer guidance for any fixed release.; Remove or disable MS Analysis if no maintained fix exists..

Prepared

Jun 29, 2026, 21:36 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.