Vulnerability in Francisco Burzi Php-Nuke
CVE-2005-1001
PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message.
EPSS: 0.015 (70.8th percentile) — read the EPSS interpretation.
Affected products
- Francisco_burzi Php-nuke — versions 7.6
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
- cve@mitre.org (vdb-entry, x_refsource_XF)