What’s Vulnerable › Vulnerabilities

CVE-2005-1001

• Severity: medium (CVSS 5.0 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.5% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2005-05-02 · updated 2026-06-16

Description

PHP-Nuke 7.6 allows remote attackers to obtain sensitive information via direct requests to (1) the Surveys module with the file parameter set to comments or (2) 3D-Fantasy/theme.php, which leaks the full pathname of the web server in a PHP error message.

Affected products

• Francisco Burzi Php-Nuke: 7.6

References

• http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19953
• http://archives.neohapsis.com/archives/bugtraq/2005-04/0037.html
• https://exchange.xforce.ibmcloud.com/vulnerabilities/19953

Get alerted when CVE-2005-1001 or the next vulnerability affects your stack