CVE-2003-1537: Postnuke Software Foundation Postnuke

Medium severity, CVSS 5.0. EPSS: 1.3% chance of exploitation in the next 30 days.

Directory traversal vulnerability in PostNuke 0.723 and earlier allows remote attackers to include arbitrary files named theme.php via the theme parameter to index.php.

Affected products

• Postnuke Software Foundation Postnuke: up to and including 0.723

Published 2003-12-31. Last modified 2026-06-16.