HTTP: PHP-Nuke Multiple Files Path Disclosure (1)
This signature detects attempts to exploit a known vulnerability in the PHPNuke 6.0 Package. Attackers can bypass the modules.php wrapper script and access the php scripts directly to obtain sensitive information.
Extended Description
An attacker could potentially cause an error condition in PHPNuke that causes it to display a PHP error, disclosing the physical filesystem path of the affected web site.
References
URL: http://www.security.nnov.ru/search/document.asp?docid=3884
Short Name
HTTP:PHP:PHPNUKE:PATH-DISC1
Severity
Warning
Recommended
False
Recommended Action
None
Category
HTTP
Keywords
(1) Disclosure Files Multiple PHP-Nuke Path
Release Date
04/22/2003
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3375
False Positive
Unknown