Description
The preview_review function in the Reviews module in PHP-Nuke 6.0 to 7.3, when running on Windows systems, allows remote attackers to obtain sensitive information via an invalid date parameter, which generates an error message.
References
- 11852 third-party-advisory
- 20040611 [waraxe-2004-SA#032 - Multiple security flaws in PhpNuke 6.x - 7.3] mailing-list
- 10524 vdb-entry
- 7001 vdb-entry
- phpnuke-reviews-path-disclosure(16408) vdb-entry