Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The WebLinks module in Php-Nuke 6.x through 7.3 allows remote attackers to obtain sensitive information via an invalid show parameter, which displays the full path in a PHP error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Nuke多个输入验证漏洞
Vulnerability Description
PHP-Nuke是一个广为流行的网站创建和管理工具，它可以使用很多数据库软件作为后端，比如MySQL、PostgreSQL、mSQL、Interbase、Sybase等。 PHP-Nuke多处不正确处理用户提交的数据，远程攻击者可以利用这个漏洞进行跨站脚本，路径泄露，敏感信息泄露等攻击。 A. 路径泄露 "WebLinks"模块对"show"变量缺少过滤，可导致路径泄露： http://localhost/nuke73/modules.php?name=Web_Links&l_op=viewlink&ci
CVSS Information
N/A
Vulnerability Type
N/A