← Database

CVE-2003-1537

MEDIUM CVSS: 5.0 Published: 2003-12-31 Modified: 2026-06-16

Description

Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php.

Affected Platforms

Postnuke Software Foundation Postnuke

Weakness Type

CWE-22

References