PHP Nuke Error Message Web Root Disclosure Vulnerability

[Homer]

PHP-Nuke is a popular web based Portal system. It allows users to create accounts and contribute content to the site.

A vulnerability has been reported in some versions of PHP-Nuke. Reportedly, a maliciously constructed HTTP request will cause the index.php script to return an error message which includes the full path of the script.

This may be the result of an insecure server configuration. This possibility has not yet been confirmed.

 

[nodehost]

PHP-Nuke has flaws? NO WAY!!!!

(like this is a surprise - :uzi: phpnuke)