Signature Detail
Short Name |
HTTP:PHP:PHPNUKE:PATH-DISC2 |
|---|---|
Severity |
Low |
Recommended |
No |
Category |
HTTP |
Keywords |
php phpnuke path http |
Release Date |
2003/04/22 |
Update Number |
1213 |
Supported Platforms |
idp-4.0+, isg-3.0+, j-series-9.5+, mx-9.4+, srx-9.2+, srx-branch-9.4+, vsrx-12.1+ |
HTTP: PHP-Nuke Multiple Files Path Disclosure (2)
This signature detects attempts to exploit a known vulnerability in the PHPNuke 6.0 Package. Attackers can bypass the modules.php wrapper script and access the php scripts directly to obtain sensitive information.
Extended Description
An attacker could potentially cause an error condition in PHPNuke that causes it to display a PHP error, disclosing the physical filesystem path of the affected web site.
References