Lucene search
HistoryDec 06, 2001 - 5:00 a.m.
CVE-2001-0854
cve-2001-0854
php-nuke
remote attack
case.filemanager.php
arbitrary files
admin.php.
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.006 Low
EPSS
Percentile
77.9%
PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| francisco_burzi:php-nuke | francisco burzi php-nuke | eq | 5.2 |
Related
cvelist
cvelist
CVE-2001-0854
2001-11-22 05:00:00
nessus
nessus
PHP-Nuke Detection
2003-02-17 00:00:00
7 High
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:L/Au:N/C:N/I:P/A:N
0.006 Low
EPSS
Percentile
77.9%
Related for CVE-2001-0854