CVE-2003-1545 - Vulnerability Details - OpenCVE

Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in the file parameter. NOTE: This was originally reported as an issue in PHP-Nuke 6.5, but this is an independent addon.

No CVSS v4.0

No CVSS v3.1

No CVSS v3.0

Access Vector Network

Access Complexity Low

Authentication None

Confidentiality Impact Partial

Integrity Impact None

Availability Impact None

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Nukestyles	Viewpage
Phpnuke	Nukestyles Viewpage Module

Configuration 1 [-]

OR	cpe:2.3:a:nukestyles:viewpage::::::::
	cpe:2.3:a:phpnuke:nukestyles_viewpage_module::::::::

No data.

References

Link	Providers
http://www.securityfocus.com/archive/1/316179/30/25340/threaded
http://www.securityfocus.com/archive/1/316198/30/25340/threaded
http://www.securityfocus.com/archive/1/316209/30/25340/threaded
http://www.securityfocus.com/archive/1/316233/30/25340/threaded
http://www.securityfocus.com/archive/1/316327/30/25340/threaded
http://www.securityfocus.com/archive/1/316341/30/25310/threaded
http://www.securityfocus.com/archive/1/316585/30/25310/threaded
http://www.securityfocus.com/bid/7191
http://www.securitytracker.com/id?1006377

History

No history.

MITRE

Status: PUBLISHED

Assigner: mitre

Published: 2008-02-28T20:00:00

Updated: 2024-08-08T02:35:17.564Z

Reserved: 2008-02-28T00:00:00

Link: CVE-2003-1545

Vulnrichment

No data.

NVD

Status : Deferred

Published: 2003-12-31T05:00:00.000

Modified: 2025-04-03T01:03:51.193

Link: CVE-2003-1545

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "datePublic": "2003-03-25T00:00:00", "descriptions": [{"lang": "en", "value": "Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in the file parameter. NOTE: This was originally reported as an issue in PHP-Nuke 6.5, but this is an independent addon."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2018-10-19T14:57:01", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"name": "20030325 Re: PHPNuke viewpage.php allows Remote File retrieving", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/316341/30/25310/threaded"}, {"name": "20030325 Re: PHPNuke viewpage.php and another SQL injections", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/316209/30/25340/threaded"}, {"name": "20030327 Re: PHPNuke viewpage.php allows Remote File retrieving", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/316585/30/25310/threaded"}, {"name": "20030325 Re: PHPNuke viewpage.php allows Remote File retrieving", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/316198/30/25340/threaded"}, {"name": "20030326 Re: PHPNuke viewpage.php allows Remote File retrieving", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/316327/30/25340/threaded"}, {"name": "20030325 Re: PHPNuke viewpage.php allows Remote File retrieving", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/316233/30/25340/threaded"}, {"name": "7191", "tags": ["vdb-entry", "x_refsource_BID"], "url": "http://www.securityfocus.com/bid/7191"}, {"name": "1006377", "tags": ["vdb-entry", "x_refsource_SECTRACK"], "url": "http://www.securitytracker.com/id?1006377"}, {"name": "20030325 PHPNuke viewpage.php allows Remote File retrieving", "tags": ["mailing-list", "x_refsource_BUGTRAQ"], "url": "http://www.securityfocus.com/archive/1/316179/30/25340/threaded"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2003-1545", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in the file parameter. NOTE: This was originally reported as an issue in PHP-Nuke 6.5, but this is an independent addon."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "20030325 Re: PHPNuke viewpage.php allows Remote File retrieving", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/316341/30/25310/threaded"}, {"name": "20030325 Re: PHPNuke viewpage.php and another SQL injections", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/316209/30/25340/threaded"}, {"name": "20030327 Re: PHPNuke viewpage.php allows Remote File retrieving", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/316585/30/25310/threaded"}, {"name": "20030325 Re: PHPNuke viewpage.php allows Remote File retrieving", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/316198/30/25340/threaded"}, {"name": "20030326 Re: PHPNuke viewpage.php allows Remote File retrieving", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/316327/30/25340/threaded"}, {"name": "20030325 Re: PHPNuke viewpage.php allows Remote File retrieving", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/316233/30/25340/threaded"}, {"name": "7191", "refsource": "BID", "url": "http://www.securityfocus.com/bid/7191"}, {"name": "1006377", "refsource": "SECTRACK", "url": "http://www.securitytracker.com/id?1006377"}, {"name": "20030325 PHPNuke viewpage.php allows Remote File retrieving", "refsource": "BUGTRAQ", "url": "http://www.securityfocus.com/archive/1/316179/30/25340/threaded"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-08T02:35:17.564Z"}, "title": "CVE Program Container", "references": [{"name": "20030325 Re: PHPNuke viewpage.php allows Remote File retrieving", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/316341/30/25310/threaded"}, {"name": "20030325 Re: PHPNuke viewpage.php and another SQL injections", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/316209/30/25340/threaded"}, {"name": "20030327 Re: PHPNuke viewpage.php allows Remote File retrieving", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/316585/30/25310/threaded"}, {"name": "20030325 Re: PHPNuke viewpage.php allows Remote File retrieving", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/316198/30/25340/threaded"}, {"name": "20030326 Re: PHPNuke viewpage.php allows Remote File retrieving", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/316327/30/25340/threaded"}, {"name": "20030325 Re: PHPNuke viewpage.php allows Remote File retrieving", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/316233/30/25340/threaded"}, {"name": "7191", "tags": ["vdb-entry", "x_refsource_BID", "x_transferred"], "url": "http://www.securityfocus.com/bid/7191"}, {"name": "1006377", "tags": ["vdb-entry", "x_refsource_SECTRACK", "x_transferred"], "url": "http://www.securitytracker.com/id?1006377"}, {"name": "20030325 PHPNuke viewpage.php allows Remote File retrieving", "tags": ["mailing-list", "x_refsource_BUGTRAQ", "x_transferred"], "url": "http://www.securityfocus.com/archive/1/316179/30/25340/threaded"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2003-1545", "datePublished": "2008-02-28T20:00:00", "dateReserved": "2008-02-28T00:00:00", "dateUpdated": "2024-08-08T02:35:17.564Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:nukestyles:viewpage:*:*:*:*:*:*:*:*", "matchCriteriaId": "BCD72C7D-4B8E-438B-AA3B-5E986E447B52", "vulnerable": true}, {"criteria": "cpe:2.3:a:phpnuke:nukestyles_viewpage_module:*:*:*:*:*:*:*:*", "matchCriteriaId": "A9FDD655-AA54-45A3-85BB-8C845A193B26", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Absolute path traversal vulnerability in nukestyles.com viewpage.php addon for PHP-Nuke allows remote attackers to read arbitrary files via a full pathname in the file parameter. NOTE: This was originally reported as an issue in PHP-Nuke 6.5, but this is an independent addon."}], "id": "CVE-2003-1545", "lastModified": "2025-04-03T01:03:51.193", "metrics": {"cvssMetricV2": [{"acInsufInfo": false, "baseSeverity": "MEDIUM", "cvssData": {"accessComplexity": "LOW", "accessVector": "NETWORK", "authentication": "NONE", "availabilityImpact": "NONE", "baseScore": 5.0, "confidentialityImpact": "PARTIAL", "integrityImpact": "NONE", "vectorString": "AV:N/AC:L/Au:N/C:P/I:N/A:N", "version": "2.0"}, "exploitabilityScore": 10.0, "impactScore": 2.9, "obtainAllPrivilege": false, "obtainOtherPrivilege": false, "obtainUserPrivilege": false, "source": "nvd@nist.gov", "type": "Primary", "userInteractionRequired": false}]}, "published": "2003-12-31T05:00:00.000", "references": [{"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/316179/30/25340/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/316198/30/25340/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/316209/30/25340/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/316233/30/25340/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/316327/30/25340/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/316341/30/25310/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/archive/1/316585/30/25310/threaded"}, {"source": "cve@mitre.org", "url": "http://www.securityfocus.com/bid/7191"}, {"source": "cve@mitre.org", "url": "http://www.securitytracker.com/id?1006377"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/316179/30/25340/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/316198/30/25340/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/316209/30/25340/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/316233/30/25340/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/316327/30/25340/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/316341/30/25310/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/archive/1/316585/30/25310/threaded"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securityfocus.com/bid/7191"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "url": "http://www.securitytracker.com/id?1006377"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "nvd@nist.gov", "type": "Primary"}]}