MS Analysis module 2.0 for PHP-Nuke allows remote attackers to obtain sensitive information via a direct request to (1) browsers.php, (2) mstrack.php, or (3) title.php, which reveal the full path in a PHP error message.
References
Link | Resource |
---|---|
http://www.securityfocus.com/bid/9946 | Vendor Advisory |
http://marc.info/?l=bugtraq&m=108006319730976&w=2 |
Configurations
Configuration 1 (hide)
|
Information
Published : 2004-03-21 21:00
Updated : 2016-10-17 20:01
NVD link : CVE-2004-1839
Mitre link : CVE-2004-1839
JSON object : View
CWE
Products Affected
francisco_burzi
- php-nuke