Information disclosure in Francisco Burzi Php-Nuke

CVE-2003-1526

PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3) > in the search field, which reveals the path in an error message.

Vulnerability class: Information Disclosure

EPSS: 0.010 (58.1th percentile) — read the EPSS interpretation.

Affected products

Francisco_burzi Php-nuke — versions 7.0
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (vdb-entry, x_refsource_BID)
cve@mitre.org (mailing-list, Exploit, x_refsource_BUGTRAQ)