Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
PHP-Nuke漏洞
Vulnerability Description
PHP-Nuke 7.6允许远程攻击者通过对(1)带有文件参数集或命令的Surveys模块或(2)3D-Fantasy/theme.php的直接请求来获取敏感信息,从而在PHP出错信息中透露Web服务器的完整路径名。
CVSS Information
N/A
Vulnerability Type
N/A