CVE-2007-1449

Published: Mar 14, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Directory traversal vulnerability in mainfile.php in PHP-Nuke 8.0 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the lang parameter.

Affected (12)

Products: Phpnuke: Php Nuke

Phpnuke

1 product

Php Nuke

Configuration A

12 vulnerable

Vulnerable Software	Affected Versions
Phpnuke Php Nuke	Version 7.0
Phpnuke Php Nuke	Version 7.1
Phpnuke Php Nuke	Version 7.2
Phpnuke Php Nuke	Version 7.3
Phpnuke Php Nuke	Version 7.4
Phpnuke Php Nuke	Version 7.5
Phpnuke Php Nuke	Version 7.6
Phpnuke Php Nuke	Version 7.7
Phpnuke Php Nuke	Version 7.8
Phpnuke Php Nuke	Version 7.9
Phpnuke Php Nuke	Version 8.0.0 final
Phpnuke Php Nuke	Version 8.0