CVE-2009-0678: Ravenphpscripts Ravennuke

Medium severity, CVSS 5.0. EPSS: 2.8% chance of exploitation in the next 30 days.

images/captcha.php in RavenNuke 2.30 allows remote attackers to obtain sensitive information via an aFonts array parameter value that does not correspond to a valid font file, which reveals the installation path in an error message.

Affected products

• Ravenphpscripts Ravennuke: version 2.30 only

Published 2009-02-22. Last modified 2026-06-16.