PHP-Nuke 6.0/6.5 Web_Links Module - Full Path Disclosure

Author: Rynho Zeros Web
type: webapps
platform: php
port: 
date_added: 2003-05-13  
date_updated: 2012-11-10  
verified: 1  
codes: CVE-2003-1468;OSVDB-59366  
tags:   
aliases:   
screenshot_url:   
application_url:   

raw file: 22598.txt  
source: https://www.securityfocus.com/bid/7589/info

The Web_Links module for PHP-Nuke has been reported prone to a vulnerability which, when exploited, may disclose sensitive path information to a remote attacker.

An attacker may use the information gathered in this manner to mount further attacks against the host.

It should be noted that although PHP-Nuke version 6.x has been reported vulnerable, other versions might also be affected.

http://www.example.com/modules.php?op=modload&name=Web_Links&file=index&l_op=viewlink&cid=[any_words]
http://www.example.com/modules.php?op=modload&name=Web_Links&file=index&l_op=viewlink