Detections
Analytics

PHP-Nuke opendir.php Traversal Arbitrary File Read

medium Nessus Plugin ID 10655

Synopsis

Arbitrary files may be read on the remote server.

Description

The remote host has the CGI 'opendir.php' installed. This CGI allows anyone to read arbitrary files with the privileges of the HTTP server.

Solution

Upgrade your version of phpnuke.

Plugin Details

Severity: Medium

ID: 10655

File Name: php_nuke_opendir.nasl

Version: 1.26

Type: remote

Family: CGI abuses

Published: 4/17/2001

Updated: 11/22/2024

Configuration: Enable thorough checks

Supported Sensors: Nessus

Enable CGI Scanning: true

Risk Information

VPR

Risk Factor: Medium

Score: 4.2

CVSS v2

Risk Factor: Medium

Base Score: 5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Information

CPE: cpe:/a:phpnuke:php-nuke

Vulnerability Publication Date: 2/12/2001

Reference Information

CVE: CVE-2001-0321