CVE-2005-1699

Name of the Vulnerable Software and Affected Versions PostNuke versions 0.760-RC3

Description The issue allows remote administrators to read arbitrary files due to a directory traversal vulnerability in the pnadminapi.php file within the Xanthia module. This is achieved by using a .. (dot dot) in the skin parameter.

Recommendations For PostNuke version 0.760-RC3, consider restricting access to the pnadminapi.php file or the Xanthia module to minimize the risk of exploitation. As a temporary workaround, avoid using the skin parameter in the pnadminapi.php file until a patch is available.