CVE-2005-1024

modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.
Configurations

Configuration 1 (hide)

OR cpe:2.3:a:francisco_burzi:php-nuke:6.0:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:6.5:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:6.5_beta1:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:6.5_final:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc1:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc2:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:6.5_rc3:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:6.6:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:6.7:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:6.9:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:7.0:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:7.0_final:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:7.1:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:7.2:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:7.3:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:7.4:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:7.5:*:*:*:*:*:*:*
cpe:2.3:a:francisco_burzi:php-nuke:7.6:*:*:*:*:*:*:*

History

20 Nov 2024, 23:56

Type Values Removed Values Added
References () http://marc.info/?l=bugtraq&m=111263454308478&w=2 - () http://marc.info/?l=bugtraq&m=111263454308478&w=2 -
References () http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt - Exploit, Patch, Vendor Advisory () http://www.securityreason.com/adv/PHPNuke%206.x-7.6-p1.txt - Exploit, Patch, Vendor Advisory
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/19953 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/19953 -
References () https://exchange.xforce.ibmcloud.com/vulnerabilities/44980 - () https://exchange.xforce.ibmcloud.com/vulnerabilities/44980 -

Information

Published : 2005-05-02 04:00

Updated : 2024-11-20 23:56


NVD link : CVE-2005-1024

Mitre link : CVE-2005-1024

CVE.ORG link : CVE-2005-1024


JSON object : View

Products Affected

francisco_burzi

  • php-nuke