medium5.0Public exploit code
CVE-2001-0383
banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authe…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- PHP-Nuke 1.0/2.5/3.0/4.x - Remote Ad Banner URL Change2001-04-02 · webapps · php · Verified
Impact
banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Francisco Burzi | Php-Nuke | through 4.4 |
References
- NVD record
- CVE.org record
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0017.html
- http://phpnuke.org/download.php?dcategory=Fixes
- http://www.securityfocus.com/bid/2544
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6342
- http://archives.neohapsis.com/archives/bugtraq/2001-04/0017.html
- http://phpnuke.org/download.php?dcategory=Fixes
- http://www.securityfocus.com/bid/2544
- https://exchange.xforce.ibmcloud.com/vulnerabilities/6342