CVE-2003-1526: francisco_burzi php-nuke

Vulnerability summary

CVE-2003-1526 is a medium (CVSS 5.0) vulnerability in francisco_burzi php-nuke. EPSS estimates a 0.97% chance of exploitation in the next 30 days, higher than 61.1% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 25-10-2007
   PublishedVulnerability first disclosed.
2. 17-09-2024
   Last modifiedVulnerability information updated.

Description

PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) ", (2) ', or (3) > in the search field, which reveals the path in an error message.

• CWE-200Exposure of Sensitive Information to an Unauthorized ActorThe product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.