CVE-2004-1960: Cross-site scripting (XSS) vulnerability in blocker_query.php in Protector System 1.15b1 allows remote atta...

Security readout for executives and security teams

This is a cross-site scripting issue in an old Protector System 1.15b1 component for PhpNuke. If the component is exposed, an attacker could inject script or HTML through specific request parameters, potentially affecting users who view the resulting page. The sources do not provide a severity score, active exploitation evidence, or confirmed fix details. Exposure is likely limited to legacy PhpNuke sites running Protector System 1.15b1 with blocker_query.php reachable. Modern environments are unlikely to be affected unless they still host this old module or archived code. Treat this as a legacy exposure cleanup item unless affected systems are internet-facing or business-critical. Priority rises if Protector System 1.15b1 is still deployed publicly. Mitigation focus: Identify whether Protector System 1.15b1 is installed or exposed.; Check vendor or maintainer guidance for fixed versions or official workarounds.; Remove or disable the component if it is no longer required..

Prepared

Jun 29, 2026, 21:12 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.