Description
The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays the full path in a PHP error message.
References
- http://www.waraxe.us/index.php?modname=sa&id=29
- 10367 vdb-entry
- 20040517 [waraxe-2004-SA#030 - Multiple vulnerabilities in PhpNuke 6.x - 7.3] mailing-list
- 11625 third-party-advisory
- phpnuke-show-weblink-path-disclosure(16170) vdb-entry