PHP-Nuke Multiple Path Disclosure Vulnerabilities

Bugtraq ID:	6406
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 16 2002 12:00AM
Updated:	Dec 16 2002 12:00AM
Credit:	Discovery of these vulnerabilities is credited to "Frog Man" <[email protected]> of phpsecure.
Vulnerable:	Francisco Burzi PHP-Nuke 6.0
Not Vulnerable:

PHP-Nuke Multiple Path Disclosure Vulnerabilities

Multiple path disclosure vulnerabilities have been discovered in PHP-Nuke. This issue occurs when requesting a PHP script that shouldn't be accessed directly.

Exploiting this issue will cause the target server to disclose sensitive information about the layout of the filesystem of the host running the vulnerable software. Information of this nature may aid in mounting further attacks against the host.

PHP-Nuke Multiple Path Disclosure Vulnerabilities

The following proof of concepts have been made available by phpsecure.org:

http://[target]/modules/Downloads/voteinclude.php
http://[target]/modules/Your_Account/navbar.php
http://[target]/modules/Forums/attachment.php

PHP-Nuke Multiple Path Disclosure Vulnerabilities

Solution:
An unofficial patch has been released by phpsecure and is available at http://www.phpsecure.org/

Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

PHP-Nuke Multiple Path Disclosure Vulnerabilities

References:

• PHP-Nuke Product Page (Francisco Burzi)
  
• PHP-Nuke 6.0 : Path Disclosure & Cross Site Scripting ("Frog Man" )