CVE-2005-1024: Medium severity Francisco Burzi PHP-Nuke vulnerability
Published Apr 9, 2005
·Updated
modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) myheadlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.
Affected Software
18 affected components
Francisco Burzi PHP-Nuke=6.5_beta1
Francisco Burzi PHP-Nuke=6.5
Francisco Burzi PHP-Nuke=7.0
Francisco Burzi PHP-Nuke=7.4
Francisco Burzi PHP-Nuke=7.5
Francisco Burzi PHP-Nuke=7.2
Francisco Burzi PHP-Nuke=7.0_final
Francisco Burzi PHP-Nuke=6.5_rc2
Francisco Burzi PHP-Nuke=7.3
Francisco Burzi PHP-Nuke=6.5_rc3
Francisco Burzi PHP-Nuke=7.6
Francisco Burzi PHP-Nuke=6.0
Francisco Burzi PHP-Nuke=6.5_final
Francisco Burzi PHP-Nuke=6.7
Francisco Burzi PHP-Nuke=6.6
Francisco Burzi PHP-Nuke=6.9
Francisco Burzi PHP-Nuke=7.1
Francisco Burzi PHP-Nuke=6.5_rc1
Remediation
Patch Available
Event History
Apr 9, 2005
CVE Published
via MITRE·08:00 AM
Data Sourced
via MITRE·08:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2005-1024?
CVE-2005-1024 is categorized as a medium severity vulnerability due to its potential for information disclosure.
2
How do I fix CVE-2005-1024?
To fix CVE-2005-1024, update PHP-Nuke to the latest version where this issue is resolved.
3
What types of attacks can be performed using CVE-2005-1024?
CVE-2005-1024 allows attackers to obtain sensitive information through direct requests to certain modules.
4
Which versions of PHP-Nuke are affected by CVE-2005-1024?
CVE-2005-1024 affects PHP-Nuke versions from 6.x to 7.6.
5
What are the implications of CVE-2005-1024 for users of PHP-Nuke?
Users of PHP-Nuke may risk exposure of sensitive path information, which could be leveraged in further attacks.