bugtraq - PHP-Nuke Path Disclosure Vulnerability

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Message-ID: <20031018135651.15070.qmail@sf-www3-symnsj.securityfocus.com>
Date: 18 Oct 2003 13:56:51 -0000
From: Bahaa Naamneh <b_naamneh@...mail.com>
To: bugtraq@...urityfocus.com
Subject: PHP-Nuke Path Disclosure Vulnerability

PHP-Nuke Path Disclosure Vulnerability

Published: 18 October 2003

Released: 16 October 2003

Affected Systems: PHP-Nuke 7.0 (and possibly earlier versions).

Vendor: http://www.phpnuke.org

Description:
============
PHP-Nuke is a Web Portal System, storytelling software, news system,
online community or whatever you want to call it. 
Its goal is to have an automated web site to distribute news and
articles with user system. 

Details:
========
It's possible to disclose potentially sensitive installation path
information to the remote attacker by using ("') " and ' chars in the
search textbox : http://[Site]/modules.php?name=Search
or we can use this chars " and > and ' this chars will cause a
disclosure of the installation path and the text will protrusion out
of the search textbox.

Vendor status:
==============
The vendor has been informed.

Discovered by / credit:
=======================
Bahaa Naamneh
b_naamneh@...mail.com
http://www.bsecurity.tk