Information disclosure in Phpnuke Php-Nuke

CVE-2005-1028

PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2) the Surveys module, or (3) the Your_Account module, which reveals the path in a PHP error message.

Vulnerability class: Information Disclosure

EPSS: 0.012 (64.8th percentile) — read the EPSS interpretation.

Affected products

Phpnuke Php-nuke
N/a — versions n/a

Weakness classification (CWE)

CWE-200 — Information Disclosure

References

cve@mitre.org (mailing-list, x_refsource_BUGTRAQ, Mailing List, Third Party Advisory)