medium5.0Public exploit code
CVE-2004-1830
error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid (1) language, (2) newlang, or (3) lang p…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Nuke Error Manager Module 2.1 - 'error.php?language' Full Path Disclosure2004-03-18 · webapps · php · Verified
Impact
error.php in Error Manager 2.1 for PHP-Nuke 6.0 allows remote attackers to obtain sensitive information via an invalid (1) language, (2) newlang, or (3) lang parameter, which leaks the pathname in a PHP error message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Francisco Burzi | Php-Nuke | Version 6.0 |
References
- NVD record
- CVE.org record
- http://marc.info/?l=bugtraq&m=107963064317560&w=2
- http://secunia.com/advisories/11164
- http://www.osvdb.org/4386
- http://www.securityfocus.com/bid/9911
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15524
- http://marc.info/?l=bugtraq&m=107963064317560&w=2
- http://secunia.com/advisories/11164
- http://www.osvdb.org/4386
- http://www.securityfocus.com/bid/9911
- https://exchange.xforce.ibmcloud.com/vulnerabilities/15524