bugtraq - Postnuke: path disclosure (0.7.2.3 and prior)

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <3801.200.43.177.31.1054095320.squirrel@horizon.uncompiled.com>
Date: Wed, 28 May 2003 04:15:20 -0000 (GMT)
From: "rkc" <rkc@...ompiled.com>
To: bugtraq@...urityfocus.com
Subject: Postnuke: path disclosure (0.7.2.3 and prior)

Intro.

What is PostNuke ?
PostNuke is a weblog/Content Management System (CMS).
It is far more secure and stable than competing products.

Home Page: http://www.postnuke.com

&&

A vulnerability have been found in Postnuke (v0.7.2.3-Phoenix & prior)
which allow users to determine the physical path of this cms.

This vulnerability would allow a remote user to determine the full path to
the web root directory.

Example:

http://www.[target-website].com/modules.php?op=modload&name=Sections&file=index&req=viewarticle&artid=

Error:

Fatal error: Call to a member function on a non-object in
/the/full/path/public_html/modules/Sections/index.php on line 238

Cheers,

rkc

-- 
Rep. Argentina
6765656B207374796C65
StFU, and RtFM !