[24784] in bugtraq
Fw: PHPNuke 5.4 Path Disclosure Vulnerability?
daemon@ATHENA.MIT.EDU (godminus)
Thu Mar 21 15:11:45 2002
Date: Wed, 20 Mar 2002 17:20:07 +0200
From: godminus <godminus@owns.com>
To: bugtraq@securityfocus.org
Message-id: <001101c1d022$bb00ecb0$0b00000a@god>
MIME-version: 1.0
Content-type: text/plain; charset=iso-8859-1
Content-transfer-encoding: 7BIT
The vendor was contacted on the 9th of March, 2002, and did not reply
-- godminus
> Hello,
>
> I believe I`ve found (if no one else have reported already) a path
> disclosure vulnerability in PHPNuke version 5.4 (maybe 5.5 too? I didn't
> test it againt version 5.5)
>
> Example:
>
> http://www.site.com/index.php?file=index.php
>
> The error would be something like:
>
> Fatal error: Cannot redeclare theindex() in
> /var/www_servers/w00/w308vs1701/docs/csleague.israel.net/index.php on line
> 7
>
> peace
> godminus
>
>
>
