CVE-2005-1698
First published: Tue May 24 2005(Updated: )
PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to (1) theme.php or (2) Xanthia.php in the Xanthia module, (3) user.php, (4) thelang.php, (5) text.php, (6) html.php, (7) menu.php, (8) finclude.php, or (9) button.php in the pnblocks directory in the Blocks module, (10) config.php in the NS-Multisites (aka Multisites) module, or (11) xmlrpc.php, which reveals the path in an error message.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Postnuke Software Foundation Pnphpbb | =0.750 | |
| Postnuke Software Foundation Pnphpbb | =0.760-rc3 | |
| Postnuke Software Foundation Pnphpbb | =0.750 | |
| Postnuke Software Foundation Pnphpbb | =0.760_rc3 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What are the vulnerable versions of PostNuke for CVE-2005-1698?
The vulnerable versions of PostNuke for CVE-2005-1698 are 0.750 and 0.760 RC3.
What type of vulnerability is CVE-2005-1698?
CVE-2005-1698 is an information disclosure vulnerability that allows remote attackers to access sensitive information.
How can CVE-2005-1698 be exploited?
CVE-2005-1698 can be exploited by making direct requests to specific PHP files in PostNuke.
What should I do to secure my PostNuke installation affected by CVE-2005-1698?
To secure your PostNuke installation affected by CVE-2005-1698, upgrade to a patched version of the software.
Is CVE-2005-1698 still relevant for current software deployments?
Yes, CVE-2005-1698 is relevant for current software deployments using the specified vulnerable versions of PostNuke.
- agent/type
- agent/first-publish-date
- agent/author
- agent/severity
- agent/references
- agent/weakness
- agent/description
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/event
- agent/source
- agent/softwarecombine
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- collector/nvd-index
- collector/nvd-historical
- vendor/postnuke
- canonical/postnuke software foundation pnphpbb
- version/postnuke software foundation pnphpbb/0.750
- version/postnuke software foundation pnphpbb/0.760-rc3
- vendor/postnuke software foundation
- version/postnuke software foundation pnphpbb/0.760_rc3