CVE-2006-6267

No fix known EPSS 1%

PostNuke 0.7.5.0, and certain minor versions, allows remote attackers to obtain sensitive information via a non-numeric value of the stop parameter, which reveals the path in an error message.

Published 2006-12-04 · CVE record · OSV

Products: postnuke_software_foundation postnuke