https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 12 Nov 2026 15:29:32 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2005-1024 <p>modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.</p> <p>modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2005-1024 https://vulnerability.circl.lu/vuln/ghsa-9v3f-9r8j-jvcj <p>modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.</p> <p>modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message.</p> https://vulnerability.circl.lu/vuln/ghsa-9v3f-9r8j-jvcj https://vulnerability.circl.lu/vuln/gsd-2005-1024 gsd-2005-1024 https://vulnerability.circl.lu/vuln/gsd-2005-1024 https://vulnerability.circl.lu/vuln/var-200505-1004 <p>modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message. PHPNuke is reported prone to multiple cross-site scripting vulnerabilities affecting various modules. The affected modules include &#39;Search&#39;, &#39;FAQ&#39;, and &#39;Encyclopedia&#39;. The &#39;banners.php&#39; script is also affected. An attacker can exploit these issues by creating a malicious link containing HTML and script code and send this link to a vulnerable user. This can allow for theft of cookie-based authentication credentials and other attacks. PHPNuke 7.6 and prior versions are reportedly affected by these issues</p> <p>modules.php in PHP-Nuke 6.x to 7.6 allows remote attackers to obtain sensitive information via a direct request to (1) my_headlines, (2) userinfo, or (3) search, which reveals the path in a PHP error message. PHPNuke is reported prone to multiple cross-site scripting vulnerabilities affecting various modules. The affected modules include &#39;Search&#39;, &#39;FAQ&#39;, and &#39;Encyclopedia&#39;. The &#39;banners.php&#39; script is also affected. An attacker can exploit these issues by creating a malicious link containing HTML and script code and send this link to a vulnerable user. This can allow for theft of cookie-based authentication credentials and other attacks. PHPNuke 7.6 and prior versions are reportedly affected by these issues</p> https://vulnerability.circl.lu/vuln/var-200505-1004