peter bassill · operator
$ cve CVE-2003-1545 JSON

CVE-2003-1545 EXPLOIT

5.0
MEDIUM · CVSS 2.0 · EPSS 3.6% (pctl 89)

Patch early

A public exploit exists.

Description

Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in the file parameter. NOTE: This was originally reported as an issue in PHP-Nuke 6.5, but this is an independent addon.

Scoring

CVSS5.0 (MEDIUM, v2.0)
VectorAV:N/AC:L/Au:N/C:P/I:N/A:N
EPSS3.6% — more likely to be exploited than 89% of all CVEs
WeaknessCWE-22
On CISA KEVno
Public exploityes
Published2003-12-31
Last modified2026-06-16

Affected (2)

VendorProduct
nukestylesviewpage
phpnukenukestyles viewpage module

Public exploits

SourceTitleDate
exploit-dbPHP-Nuke 6.5 Addon - 'Viewpage.php' File Disclosure2003-03-25

References

→ the Explorer  ·  watch your stack  ·  NVD