{"id":"CVE-2003-1526","aliases":["EUVD-2003-1516","GHSA-jxw3-88g9-fx95"],"status":"published","title":"PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such...","description":"PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) \", (2) ', or (3) \u003e in the search field, which reveals the path in an error message.","severity":{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-08","score":0.00966,"percentile":0.61957,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-200"],"published":"2003-12-31T05:00:00Z","modified":"2026-06-16T22:04:35Z","products":[{"vendor":"francisco_burzi","product":"php-nuke"}],"references":[{"url":"http://www.securityfocus.com/bid/8848","tags":["vdb-entry","x_refsource_BID","x_transferred"]},{"url":"http://www.securityfocus.com/archive/1/341743","tags":["mailing-list","x_refsource_BUGTRAQ","x_transferred","Exploit"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2003-1526"},{"url":"https://github.com/advisories/GHSA-jxw3-88g9-fx95"}],"sources":{"cve":[{"id":"CVE-2003-1526","description":"PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) \", (2) ', or (3) \u003e in the search field, which reveals the path in an error message.","status":"published","published":"2007-10-25T19:00:00Z","modified":"2024-09-17T03:32:33.284Z","updated_at":"2026-11-02T14:20:16.072351Z"}],"euvd":[{"id":"EUVD-2003-1516","description":"PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) \", (2) ', or (3) \u003e in the search field, which reveals the path in an error message.","status":"published","published":"2007-10-25T19:00:00Z","modified":"2024-09-17T03:32:33Z","updated_at":"2026-11-03T00:28:31.175316Z"}],"ghsa":[{"id":"GHSA-jxw3-88g9-fx95","title":"PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such...","description":"PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) \", (2) ', or (3) \u003e in the search field, which reveals the path in an error message.","status":"published","published":"2022-04-29T01:28:13Z","modified":"2023-01-30T05:02:21Z","cwes":["CWE-200"],"updated_at":"2026-11-02T14:46:37.149934Z"}],"nvd":[{"id":"CVE-2003-1526","description":"PHP-Nuke 7.0 allows remote attackers to obtain the installation path via certain characters such as (1) \", (2) ', or (3) \u003e in the search field, which reveals the path in an error message.","status":"published","published":"2003-12-31T05:00:00Z","modified":"2026-06-16T22:04:35.763Z","cvss":[{"version":"2.0","score":5,"vector":"AV:N/AC:L/Au:N/C:N/I:P/A:N","level":"medium","assessor":"primary"}],"cwes":["CWE-200"],"updated_at":"2026-11-02T14:00:48.212104Z"}]}}