The search module in Php-Nuke allows remote attackers to gain sensitive information via the (1) "**" or (2) "+" search patterns, which reveals the path in an error message.
Software | From | Fixed in |
---|---|---|
francisco_burzi / php-nuke | 8.0_final | 8.0_final.x |