myPHPNuke phptonuke.php filnavn Parameter Traversal Arbitrary File Access

medium Nessus Plugin ID 11824

Language:

Synopsis

The remote web server contains a PHP script that allows for reading of arbitrary files.

Description

The version of myPHPNuke installed on the remote host allows anyone to read arbitrary files by passing the full filename to the 'filnavn' argument of the 'phptonuke.php' script.

Solution

Upgrade to the latest version.

Plugin Details

Severity: Medium

ID: 11824

File Name: phptonuke_dir_trav.nasl

Version: 1.23

Type: remote

Family: CGI abuses

Published: 8/31/2003

Updated: 1/19/2021

Supported Sensors: Nessus

Risk Information

VPR

Risk Factor: Medium

Score: 4.5

CVSS v2

Risk Factor: Medium

Base Score: 5

Temporal Score: 3.7

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:N/A:N

Vulnerability Information

CPE: cpe:/a:myphpnuke:myphpnuke

Required KB Items: www/PHP

Excluded KB Items: Settings/disable_cgi_scanning

Exploit Ease: No exploit is required

Reference Information

CVE: CVE-2002-1913

BID: 5982

Detections

Analytics