PHP-Nuke Surveys Module Path Disclosure

2005-04-05T18:44:55
ID OSVDB:15405
Type osvdb
Reporter OSVDB
Modified 2005-04-05T18:44:55

Description

Manual Testing Notes

http://[victim]/[nuke_dir]/modules.php?name=Surveys&op=results&pollID=[id]&mode=&order=&thold=&tid=[something]

References:

Vendor URL: http://phpnuke.org/ Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2005-04/0058.html