Description
phptonuke.php in myPHPNuke 1.8.8 allows remote attackers to read arbitrary files via a full pathname in the filnavn variable.
References
- myphpnuke-phptonuke-view-files(10396) vdb-entry
- 5982 vdb-entry
- 20021016 phptonuke allows Remote File Retrieving mailing-list