Unrated severityNVD Advisory· Published May 2, 2005· Updated Apr 16, 2026
CVE-2005-1001
CVE-2005-1001
Description
PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message.
Affected products
1Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
2- archives.neohapsis.com/archives/bugtraq/2005-04/0037.htmlnvdExploitPatchVendor Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/19953nvd
News mentions
0No linked articles in our index yet.