CVE-2001-0292 in PHP-Nuke
Summary
PHP-Nuke 4.4.1a allows remote attackers to modify a user s email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator.
Be aware that VulDB is the high quality source for vulnerability data.
Disclosure
05/03/2001
Status
Confirmed
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 16657 | Francisco Burzi PHP-Nuke User Data user.php privileges management | 269 | Not defined | Official fix | CVE-2001-0292 |