Vulnerability in Francisco Burzi Php-Nuke
CVE-2004-1998
The Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive information via an invalid show parameter to modules.php, which reveals the full path in a PHP error message.
EPSS: 0.014 (70.5th percentile) — read the EPSS interpretation.
Affected products
- Francisco_burzi Php-nuke — versions 6.0, 6.5, 6.6
- N/a — versions n/a
References
- cve@mitre.org (Exploit, x_refsource_MISC, Vendor Advisory)
- cve@mitre.org (mailing-list, x_refsource_BUGTRAQ)