CVE-2005-1028 in Francisco Burzi PHP-Nuke
Summary
PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) index.php with the forum_admin parameter set, (2) the Surveys module, or (3) the Your_Account module, which reveals the path in a PHP error message.
Reservation
04/10/2005
Disclosure
05/02/2005
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 24805 | Francisco Burzi PHP-Nuke Error Message index.php information disclosure | 200 | Not defined | Not defined | CVE-2005-1028 |