CGI abuses : Post-Nuke information disclosure (2)

Vulnerability Search		Search 324607 CVE descriptions and 145615 test descriptions, access 10,000+ cross references.
	Tests CVE All

Test ID: 1.3.6.1.4.1.25623.1.0.11666

Category: CGI abuses

Title: Post-Nuke information disclosure (2)

Summary: NOSUMMARY

Description: Description:

The remote host is running post-nuke. It is possible to use it
to determine the full path to its installation on the server
or the name of the database used, by doing a request like :

/modules.php?op=modload&name=Sections&file=index&req=viewarticle&artid=

An attacker may use these flaws to gain a more intimate knowledge
of the remote host.

Solution : Change the members list privileges to admins only, or disable
the members list module completely
Risk factor : Low

Copyright This script is Copyright (C) 2003 Tenable Network Security

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit.
To run a free test of this vulnerability against your system, register below.

Test ID:	1.3.6.1.4.1.25623.1.0.11666
Category:	CGI abuses
Title:	Post-Nuke information disclosure (2)
Summary:	NOSUMMARY
Description:	Description: The remote host is running post-nuke. It is possible to use it to determine the full path to its installation on the server or the name of the database used, by doing a request like : /modules.php?op=modload&name=Sections&file=index&req=viewarticle&artid= An attacker may use these flaws to gain a more intimate knowledge of the remote host. Solution : Change the members list privileges to admins only, or disable the members list module completely Risk factor : Low
Copyright	This script is Copyright (C) 2003 Tenable Network Security