PHP-Nuke 5.5/6.0 AvantGo Module – Full Path Disclosure

漏洞ID	1053752	漏洞类型
发布时间	2003-03-12	更新时间	2003-03-12
CVE编号	N/A	CNNVD-ID	N/A
漏洞平台	PHP	CVSS评分	N/A

|漏洞来源

https://www.exploit-db.com/exploits/22347

|漏洞详情

漏洞细节尚未披露

|漏洞EXP

source: http://www.securityfocus.com/bid/7078/info

The AvantGo module for PHPNuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker.

An attacker may use the information gathered in this manner to mount further attacks against the host.

This vulnerability was reported to affect the AvantGo module shipped with PHPNuke version 5.5 and 6.0 it has been suggested that other versions may also be affected.

http://www.example.com/modules.php?name=AvantGo&file=print&sid=
http://www.example.com/modules.php?name=AvantGo&file=print&sid=[Any_Text]

相关推荐: XPilot Server Remote Buffer Overflow Vulnerability

XPilot Server Remote Buffer Overflow Vulnerability 漏洞ID 1102253 漏洞类型 Boundary Condition Error 发布时间 2002-04-17 更新时间 2002-04-17 CVE编…