Exploit PHP-Nuke Error Manager Module 2.1 - 'error.php?language' Full Path Disclosure

Exploiter

Хакер
34,644
0
18 Дек 2022
EDB-ID
23844
Проверка EDB
  1. Пройдено
Автор
JANEK VIND
Тип уязвимости
WEBAPPS
Платформа
PHP
CVE
cve-2004-1830
Дата публикации
2004-03-18
Код:
source: https://www.securityfocus.com/bid/9911/info

It has been reported that Error Manager is prone to multiple vulnerabilities. These issues are due to failure to validate user input, failure to handle exceptional conditions and simple design errors.

These issues may be leveraged to carry out cross-site scripting attacks, reveal information about the application configuration and initiate HTML injection attacks against the affected system.

http://www.example.com/nuke71/error.php?newlang=foobar
 
Источник
www.exploit-db.com

Похожие темы