PHP-Nuke 6.x/7.x Modpath Parameter Potential File Include Vulnerability

ID SSV:77863
Type seebug
Reporter Root
Modified 2014-07-01T00:00:00


No description provided by source.


PHP-Nuke is prone to a potential file include vulnerability. This issue could allow a remote attacker to include malicious files containing aribtrary code to be executed on a vulnerable system. This issue can be exploited via the 'modpath' parameter.

If successful, the malicious script supplied by the attacker will be executed in the context of the web server hosting the vulnerable software.