Lucene search
HistoryAug 12, 2002 - 4:00 a.m.
CVE-2002-0483
cve-2002-0483
php-nuke 5.4
remote attack
path disclosure
error message
nvd
6.5 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.02 Low
EPSS
Percentile
89.0%
index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that leaks the pathname.
Affected configurations
Node
francisco_burziphp-nukeMatch5.0
ORfrancisco_burziphp-nukeMatch5.0.1
ORfrancisco_burziphp-nukeMatch5.1
ORfrancisco_burziphp-nukeMatch5.2
ORfrancisco_burziphp-nukeMatch5.2a
ORfrancisco_burziphp-nukeMatch5.3.1
ORfrancisco_burziphp-nukeMatch5.4
Related
nvd
nvd
CVE-2002-0483
2002-08-12 04:00:00
cvelist
cvelist
CVE-2002-0483
2002-06-11 04:00:00
nessus
nessus
PHP-Nuke Detection
2003-02-17 00:00:00
6.5 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
Access Complexity
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
NONE
Availability Impact
NONE
AV:N/AC:L/Au:N/C:P/I:N/A:N
0.02 Low
EPSS
Percentile
89.0%
Related for CVE-2002-0483