| Package | Affected versions | Patched versions |
|---|---|---|
| php-nuke | = 4.0.4= 4.4 |
bb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. (dot dot) sequences into a malformed username argument.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free