CVE-2004-0736: Medium severity Francisco Burzi PHP-Nuke vulnerability
The search module in Php-Nuke allows remote attackers to gain sensitive information via the (1) "" or (2) "+" search patterns, which reveals the path in an error message.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2004-0736?
CVE-2004-0736 is classified as a moderate severity vulnerability due to its potential to expose sensitive information.
How do I fix CVE-2004-0736?
To mitigate CVE-2004-0736, consider upgrading to a newer, patched version of PHP-Nuke, or implement input validation to sanitize search queries.
What are the potential impacts of CVE-2004-0736?
CVE-2004-0736 can allow attackers to gain unauthorized access to sensitive paths in the server, potentially leading to further exploitation.
Which versions of PHP-Nuke are affected by CVE-2004-0736?
CVE-2004-0736 specifically affects PHP-Nuke version 8.0_final.
Is there a workaround for CVE-2004-0736?
As a temporary workaround for CVE-2004-0736, you can disable the search module or restrict search functionality until a patch can be applied.