Vulnerabilities > CVE-2001-0321 - Remote Security vulnerability in Francisco Burzi PHP-Nuke 8.0Final
Attack vector
NETWORK Attack complexity
LOW Privileges required
NONE Confidentiality impact
PARTIAL Integrity impact
NONE Availability impact
NONE Summary
opendir.php script in PHP-Nuke allows remote attackers to read arbitrary files by specifying the filename as an argument to the requesturl parameter.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |
Nessus
NASL family | CGI abuses |
NASL id | PHP_NUKE_OPENDIR.NASL |
description | The remote host has the CGI |
last seen | 2020-06-01 |
modified | 2020-06-02 |
plugin id | 10655 |
published | 2001-04-17 |
reporter | This script is Copyright (C) 2001-2018 Tenable Network Security, Inc. |
source | https://www.tenable.com/plugins/nessus/10655 |
title | PHP-Nuke opendir.php Traversal Arbitrary File Read |