CVE-2004-0736: Francisco Burzi PHP-Nuke

Medium severity, CVSS 5.0. EPSS: 1.2% chance of exploitation in the next 30 days.

The search module in Php-Nuke allows remote attackers to gain sensitive information via the (1) "**" or (2) "+" search patterns, which reveals the path in an error message.

Affected products

• Francisco Burzi PHP-Nuke: version 8.0_final only

Published 2004-07-27. Last modified 2026-06-16.