I am using phpnuke 5.5 and I don't get any simular error ... Thierry Martens Network & System Engineer Cable & Wireless http://www.cw.com -----Original Message----- From: godminus [mailto:godminus@owns.com] Sent: woensdag 20 maart 2002 16:20 To: bugtraq@securityfocus.org Subject: Fw: PHPNuke 5.4 Path Disclosure Vulnerability? The vendor was contacted on the 9th of March, 2002, and did not reply -- godminus > Hello, > > I believe I`ve found (if no one else have reported already) a path > disclosure vulnerability in PHPNuke version 5.4 (maybe 5.5 too? I didn't > test it againt version 5.5) > > Example: > > http://www.site.com/index.php?file=index.php > > The error would be something like: > > Fatal error: Cannot redeclare theindex() in > /var/www_servers/w00/w308vs1701/docs/csleague.israel.net/index.php on line > 7 > > peace > godminus > > >