Lucene search
HistoryMay 03, 2001 - 4:00 a.m.
CVE-2001-0292
cve-2001-0292
php-nuke 4.4.1a
user privacy
email breach
password retrieval
7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.014 Low
EPSS
Percentile
86.3%
PHP-Nuke 4.4.1a allows remote attackers to modify a user’s email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator.
| CPE | Name | Operator | Version |
|---|---|---|---|
| francisco_burzi:php-nuke | francisco burzi php-nuke | eq | 4.4.1a |
Related
cvelist
cvelist
CVE-2001-0292
2001-04-04 04:00:00
nessus
nessus
PHP-Nuke Detection
2003-02-17 00:00:00
7 High
AI Score
Confidence
Low
7.5 High
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
0.014 Low
EPSS
Percentile
86.3%
Related for CVE-2001-0292