The search module in Php-Nuke allows remote malicious users to gain sensitive information via the (1) "**" or (2) "+" search patterns, which reveals the path in an error message.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
francisco burzi php-nuke 8.0_final |
Vulmon