CVE-2005-1001

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or…

published April 7, 2005

CVSS
—
EPSS
1%
Percentile
73.2
In the wild
Unconfirmed
What it is

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01457 · 73.2th percentile
Published
2005-04-07T04:00Z
EPSS history
Timeline
  • 07 APR 04:00Z
    PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or…
    cvelistv5