PT-2001-1601 · Php · Php-Nuke

Publicado 2001-06-18 · Atualizado 2017-10-10 · CVE-2001-0383

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions PHP-Nuke versions 4.4 and earlier

Description The issue allows remote attackers to modify banner ad URLs without authentication by directly calling the Change operation in the banners.php file.

Recommendations For PHP-Nuke versions 4.4 and earlier, consider restricting access to the banners.php file until a patch is available. As a temporary workaround, implement authentication requirements for the Change operation to prevent unauthorized modifications.

Exploit

Correção

Identificadores relacionados

CVE-2001-0383

Produtos afetados

Php-Nuke

Referências · 7

• 🔥 https://exploit-db.com/exploits/20729 · Exploit
• http://securityfocus.com/bid/2544 · Nota
• http://archives.neohapsis.com/archives/bugtraq/2001-04/0017.html · Aviso do Fabricante
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2001-0383 · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/6342 · Nota
• http://phpnuke.org/download.php?dcategory=Fixes · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2001-0383 · Nota de Segurança