Lucene search
+L

246 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/19 12:00 a.m.•8 views

CVE-2005-1180: Undefined Security Weakness

HTTP Response Splitting vulnerability in the Surveys module in PHP-Nuke 7.6 allows remote attackers to spoof web content and poison web caches via hex-encoded CRLF "%0d%0a" sequences in the forwarder parameter...

5CVSS5.9AI score0.01442EPSS
SaveExploits1References1
Cvelist
Cvelist
•added 2005/04/09 4:00 a.m.•36 views

CVE-2005-1028

PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to 1 index.php with the forumadmin parameter set, 2 the Surveys module, or 3 the YourAccount module, which reveals the path in a PHP error message...

6.2AI score0.01192EPSS
SaveExploits0References1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/09 12:00 a.m.•7 views

CVE-2005-1028: Exposure of Sensitive Information to an Unauthorized Actor

PHP-Nuke 6.x through 7.6 allows remote attackers to obtain sensitive information via a direct request to 1 index.php with the forumadmin parameter set, 2 the Surveys module, or 3 the YourAccount module, which reveals the path in a PHP error message...

5CVSS5.8AI score0.01192EPSS
SaveExploits0References2
CVE
CVE
•added 2005/04/07 4:00 a.m.•62 views

CVE-2005-1001

PHP-Nuke 7.6 is affected by CVE-2005-1001, where remote attackers can obtain sensitive information. The vulnerability arises from direct requests to the Surveys module (file parameter set to comments) or to 3D-Fantasy/theme.php, which causes a PHP error message that leaks the full server pathname...

5CVSS6.7AI score0.01457EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2005/04/07 4:00 a.m.•38 views

CVE-2005-1001

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to 1 the Surveys module with the file parameter set to comments or 2 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message...

6.3AI score0.01457EPSS
SaveExploits1References2
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2005/04/07 12:00 a.m.•5 views

CVE-2005-1001: Undefined Security Weakness

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to 1 the Surveys module with the file parameter set to comments or 2 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message...

5CVSS5.8AI score0.01457EPSS
SaveExploits1References1
Rows per page
Query Builder