OSC2Nuke 7x version 1 and OSCNukeLite versions 3.1 and below are susceptible to full path disclosure vulnerabilities along with the possibility of remote command execution.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33468/2004-OSC2Nuke-001.txt
Source: https://packetstormsecurity.com/files/33468/2004-OSC2Nuke-001.txt.html