Description
PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user.
References
- 20011105 Copying and Deleting Files Using PHP-Nuke mailing-list
- 3510 vdb-entry
- phpnuke-filemanager-gain-privileges(7478) vdb-entry