BID:3110 - PHP Nuke AddOn Arbitrary File Disclosure Vulnerability

PHP Nuke AddOn Arbitrary File Disclosure Vulnerability

BID:3110

Info

PHP Nuke AddOn Arbitrary File Disclosure Vulnerability

Bugtraq ID:	3110
Class:	Input Validation Error
CVE:
Remote:	No
Local:	Yes
Published:	Jul 13 2001 12:00AM
Updated:	Jul 13 2001 12:00AM
Credit:	This vulnerability was discovered by <[email protected]> and posted to BugTraq on July 27th, 2001.
Vulnerable:	nukeaddon.com PHP Nuke AddOn 5.0.1 beta + Francisco Burzi PHP-Nuke 5.0.1 + Francisco Burzi PHP-Nuke 5.0 + Francisco Burzi PHP-Nuke 4.4.1 a + Francisco Burzi PHP-Nuke 4.4 + Francisco Burzi PHP-Nuke 4.3 + Francisco Burzi PHP-Nuke 4.0 + Francisco Burzi PHP-Nuke 2.5 + Francisco Burzi PHP-Nuke 1.0 nukeaddon.com PHP Nuke AddOn 5.0 4 + Francisco Burzi PHP-Nuke 5.0.1 + Francisco Burzi PHP-Nuke 5.0 + Francisco Burzi PHP-Nuke 4.4.1 a + Francisco Burzi PHP-Nuke 4.4 + Francisco Burzi PHP-Nuke 4.3 + Francisco Burzi PHP-Nuke 4.0 + Francisco Burzi PHP-Nuke 3.0 + Francisco Burzi PHP-Nuke 2.5 + Francisco Burzi PHP-Nuke 1.0 nukeaddon.com PHP Nuke AddOn 5.0 RC1 + Francisco Burzi PHP-Nuke 5.0.1 + Francisco Burzi PHP-Nuke 5.0 + Francisco Burzi PHP-Nuke 4.4.1 a + Francisco Burzi PHP-Nuke 4.4 + Francisco Burzi PHP-Nuke 4.3 + Francisco Burzi PHP-Nuke 4.0 + Francisco Burzi PHP-Nuke 3.0 + Francisco Burzi PHP-Nuke 2.5 + Francisco Burzi PHP-Nuke 1.0 nukeaddon.com PHP Nuke AddOn 5.0 + Francisco Burzi PHP-Nuke 5.0.1 + Francisco Burzi PHP-Nuke 5.0 + Francisco Burzi PHP-Nuke 4.4.1 a + Francisco Burzi PHP-Nuke 4.4 + Francisco Burzi PHP-Nuke 4.3 + Francisco Burzi PHP-Nuke 4.0 + Francisco Burzi PHP-Nuke 3.0 + Francisco Burzi PHP-Nuke 2.5 + Francisco Burzi PHP-Nuke 1.0 nukeaddon.com PHP Nuke AddOn 4.0.1 beta + Francisco Burzi PHP-Nuke 5.0.1 + Francisco Burzi PHP-Nuke 5.0 + Francisco Burzi PHP-Nuke 4.4.1 a + Francisco Burzi PHP-Nuke 4.4 + Francisco Burzi PHP-Nuke 4.3 + Francisco Burzi PHP-Nuke 4.0 + Francisco Burzi PHP-Nuke 3.0 + Francisco Burzi PHP-Nuke 2.5 + Francisco Burzi PHP-Nuke 1.0 nukeaddon.com PHP Nuke AddOn 4.0 beta + Francisco Burzi PHP-Nuke 5.0.1 + Francisco Burzi PHP-Nuke 5.0 + Francisco Burzi PHP-Nuke 4.4.1 a + Francisco Burzi PHP-Nuke 4.4 + Francisco Burzi PHP-Nuke 4.3 + Francisco Burzi PHP-Nuke 4.0 + Francisco Burzi PHP-Nuke 3.0 + Francisco Burzi PHP-Nuke 2.5 + Francisco Burzi PHP-Nuke 1.0 nukeaddon.com PHP Nuke AddOn 3.0.1 beta + Francisco Burzi PHP-Nuke 5.0.1 + Francisco Burzi PHP-Nuke 5.0 + Francisco Burzi PHP-Nuke 4.4 + Francisco Burzi PHP-Nuke 4.0 + Francisco Burzi PHP-Nuke 3.0 + Francisco Burzi PHP-Nuke 2.5 + Francisco Burzi PHP-Nuke 1.0 nukeaddon.com PHP Nuke AddOn 2.0.5 + Francisco Burzi PHP-Nuke 5.0.1 + Francisco Burzi PHP-Nuke 5.0 + Francisco Burzi PHP-Nuke 4.4.1 a + Francisco Burzi PHP-Nuke 4.4 + Francisco Burzi PHP-Nuke 4.3 + Francisco Burzi PHP-Nuke 4.0 + Francisco Burzi PHP-Nuke 3.0 + Francisco Burzi PHP-Nuke 2.5 + Francisco Burzi PHP-Nuke 1.0

Not Vulnerable:

Solution / Fix

PHP Nuke AddOn Arbitrary File Disclosure Vulnerability