CVE-2008-1680 PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenance/index.php, which reveals settings such as magic_quotes_gpc.
MediumCVSS 5.0
EPSS 2.2%
- Published
- Updated
- Exploit status
- No public exploit known
Description
PHP-Nuke Platinum 7.6.b.5 allows remote attackers to obtain configuration information via a direct request to maintenance/index.php, which reveals settings such as magic_quotes_gpc.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| future nuke php-nuke platinum | = 7.6.b.5 | No fix listed |
References
- platinum-index-info-disclosure(41745) vdb-entry
- 5295 exploit