Unscored CVE-2003-1537 EUVD-2003-1527GHSA-wrgf-6m9j-q9hq

Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the …

Published Nov 14, 2007 · Updated Sep 17, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php.

References

20030309 Postnuke v 0.723 SQL injection and directory traversing mailing-list