CVE-2004-1998: Francisco Burzi PHP-Nuke

Medium severity, CVSS 5.0. EPSS: 1.4% chance of exploitation in the next 30 days.

The Downloads module in Php-Nuke 6.x through 7.2 allows remote attackers to gain sensitive information via an invalid show parameter to modules.php, which reveals the full path in a PHP error message.

Affected products

• Francisco Burzi PHP-Nuke: version 6.0 only; version 6.5 only; version 6.6 only; version 6.7 only; version 6.8 only; version 6.9 only; …

Published 2004-05-05. Last modified 2026-06-16.