Exploitation Summary
EIP tracks 1 public exploit for CVE-2002-0483. PoCs published by godminus.
AI-analyzed exploit summary The provided text describes a path disclosure vulnerability in PHP-Nuke, where a maliciously crafted HTTP request causes the index.php script to return an error message containing the full path of the script. This is due to an insecure server configuration.
Description
index.php for PHP-Nuke 5.4 and earlier allows remote attackers to determine the physical pathname of the web server when the file parameter is set to index.php, which triggers an error message that leaks the pathname.
Exploits (1)
The provided text describes a path disclosure vulnerability in PHP-Nuke, where a maliciously crafted HTTP request causes the index.php script to return an error message containing the full path of the script. This is due to an insecure server configuration.