Visit our newest sister site!
Hundreds of free aircraft flight manuals
Civilian • Historical • Military • Declassified • FREE!

TUCoPS :: Web :: General :: a6083.htm

PostNuke path disclosure
21th Mar 2003 [SBWID-6083]

	PostNuke path disclosure


	PostNuke Version: (other)


	Thanks to rkc [] advisory :
	A vulnerability have  been  found  in  Postnuke  which  allow  users  to
	determine the physical path of this cms.
	This vulnerability would allow a remote user to determine the full  path
	to the web root directory and other information, like the database  name
	Change 1234 by anything.
	If you are looking for:
	* Path disclosure in & v: (Two simples examples)
	(Change 1234 by anything).


	Change the Member_List privileges, for admin's only (?)
	Deactivate the Member_List module (?)

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2015 AOH