NetSight
IP …
high7.5Public exploit code

CVE-2004-2044

PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

PHP-Nuke 7.3, and other products that use the PHP-Nuke codebase such as the Nuke Cops betaNC PHP-Nuke Bundle, OSCNukeLite 3.1, and OSC2Nuke 7x do not properly use the eregi() PHP function with $_SERVER['PHP_SELF'] to identify the calling script, which allows remote attackers to directly access scripts, obtain path information via a PHP error message, and possibly gain access, as demonstrated using an HTTP request that contains the "admin.php" string.

Affected products

VendorProductAffected versions
Francisco BurziPhp-Nuke
Versions 5.0, 5.0.1, 5.1, 5.2, 5.2a, 5.3.1
OscommerceOsc2nuke
Version 7x_1.0
Paul LaudanskiBetanc Php-Nuke
Version bundle
TrustixSecure Linux
Versions 2.0, 2.1

References