Unscored CVE-2003-1526 EUVD-2003-1516GHSA-jxw3-88g9-fx95

PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3) > in the search fi…

Published Oct 25, 2007 · Updated Sep 17, 2024 · Assigned by mitre

Description

PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3) > in the search field, which reveals the path in an error message.

References

8848 vdb-entry
20031018 PHP-Nuke Path Disclosure Vulnerability mailing-list