Unscored CVE-2005-1050 EUVD-2005-1053GHSA-99fr-c7q5-vcf8

The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id param…

Published Apr 12, 2005 · Updated Aug 7, 2024 · Assigned by mitre

Description

The modload op in the Reviews module for PostNuke 0.760-RC3 allows remote attackers to obtain sensitive information via an invalid id parameter, which reveals the path in a PHP error message.

References

http://digitalparadox.org/advisories/postnuke.txt
20050408 Sql injection, xss and path disclosure vulnerabilities in PostNuke 0.760-RC3 mailing-list
1013670 vdb-entry
postnuke-modules-full-path-disclosure(20020) vdb-entry