Unscored CVE-2007-1449 EUVD-2007-1443GHSA-48r9-7xwr-grqc

Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a .. (dot…

Published Mar 14, 2007 · Updated Aug 7, 2024 · Assigned by mitre

Description

Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.

References

20070310 PHP-Nuke <= 8.0 Cookie Manipulation (lang) mailing-list
22909 vdb-entry
24484 third-party-advisory
20070311 Re: PHP-Nuke <= 8.0 Cookie Manipulation (lang) mailing-list