QwikSec

Security Database

CVE

CWE

Training

CVE-2005-1001

Published: Apr 7, 2005

Modified: Aug 7, 2024

PUBLISHED

Description

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message.

Vendor	Product	Versions
n/a	n/a	affected `n/a`

References

20050404 [SECURITYREASON.COM] PhpNuke 7.6=>x Multiple vulnerabilities cXIb8O3.12

mailing-list

x_refsource_BUGTRAQ

phpnuke-modulesphp-path-disclosure(19953)

vdb-entry

x_refsource_XF

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.