PT-2003-1487 · Php Nuke · Php-Nuke
CVSS v2.0
2.6
Low
| Vector | AV:N/AC:H/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions:
PHP-Nuke versions 5.x through 6.5
Description:
The issue allows remote attackers to steal sensitive information via numeric fields. This can be demonstrated using the
viewlink function and cid parameter, or through index.php.Recommendations:
For PHP-Nuke versions 5.x through 6.5, consider restricting access to the Web Links module until a patch is available. As a temporary workaround, avoid using numeric fields in the Web Links module to minimize the risk of exploitation.
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Php-Nuke