CVE-2003-1537 Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php.
MediumCVSS 5.0
EPSS 1.3%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| postnuke software foundation postnuke | <= 0.723 | No fix listed |
References
- 20030309 Postnuke v 0.723 SQL injection and directory traversing exploit mailing-list