The search module in Php-Nuke allows remote attackers to gain sensitive information via the (1) ** or (2) + search patterns, which reveals the path in an error message.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Php-nuke | Francisco_burzi | 8.0_final (including) | 8.0_final (including) |