NetSight
medium5.0

CVE-2004-1998

The Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive information via an invalid show parameter to modules.php, which reve…

Impact

The Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive information via an invalid show parameter to modules.php, which reveals the full path in a PHP error message.

Affected products

VendorProductAffected versions
Francisco BurziPhp-Nuke
Versions 6.0, 6.5, 6.6, 6.7, 6.8, 6.9

References