CVE-2005-1698: Medium severity Postnuke Postnuke vulnerability
PostNuke 0.750 and 0.760RC3 allows remote attackers to obtain sensitive information via a direct request to (1) theme.php or (2) Xanthia.php in the Xanthia module, (3) user.php, (4) thelang.php, (5) text.php, (6) html.php, (7) menu.php, (8) finclude.php, or (9) button.php in the pnblocks directory in the Blocks module, (10) config.php in the NS-Multisites (aka Multisites) module, or (11) xmlrpc.php, which reveals the path in an error message.
Affected Software
Event History
Frequently Asked Questions
What are the vulnerable versions of PostNuke for CVE-2005-1698?
The vulnerable versions of PostNuke for CVE-2005-1698 are 0.750 and 0.760 RC3.
What type of vulnerability is CVE-2005-1698?
CVE-2005-1698 is an information disclosure vulnerability that allows remote attackers to access sensitive information.
How can CVE-2005-1698 be exploited?
CVE-2005-1698 can be exploited by making direct requests to specific PHP files in PostNuke.
What should I do to secure my PostNuke installation affected by CVE-2005-1698?
To secure your PostNuke installation affected by CVE-2005-1698, upgrade to a patched version of the software.
Is CVE-2005-1698 still relevant for current software deployments?
Yes, CVE-2005-1698 is relevant for current software deployments using the specified vulnerable versions of PostNuke.