Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 18/06/2001 Updated: 10/10/2017

CVSS v2 Base Score: 5 | Impact Score: 2.9 | Exploitability Score: 10

VMScore: 505

Vector: AV:N/AC:L/Au:N/C:N/I:P/A:N

banners.php in PHP-Nuke 4.4 and previous versions allows remote malicious users to modify banner ad URLs by directly calling the Change operation, which does not require authentication.

Vulnerable Product	Search on Vulmon	Subscribe to Product
francisco burzi php-nuke

source: wwwsecurityfocuscom/bid/2544/info PHP-Nuke is a website creation/maintainence tool written in PHP3 A PHP-Nuke feature supporting cycling ad banners is subject to interference from a remote user A querystring can be submitted to an unpatched server which allows the remote user to specify a new destination URL to be opened in a ...

NVD-CWE-Other http://archives.neohapsis.com/archives/bugtraq/2001-04/0017.html http://phpnuke.org/download.php?dcategory=Fixes http://www.securityfocus.com/bid/2544 https://exchange.xforce.ibmcloud.com/vulnerabilities/6342 https://nvd.nist.gov https://www.exploit-db.com/exploits/20729/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2001-0383

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect