CVE-2001-0320 — Burzi Php-nuke vulnerability

3 documents3 sources
Severity
10.0CRITICALNVD
EPSS
0.1%
top 75.26%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Francisco Burzi Php-nuke
Timeline
PublishedMay 3
Latest updateApr 30

Description

bb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. (dot dot) sequences into a malformed username argument.

CVSS vector

AV:N/AC:L/C:C/I:C/A:CExploitability: 10.0 | Impact: 10.0

Affected Packages1 packages

▶NVDfrancisco_burzi/php-nuke4.0.4, 4.4+1

🔴Vulnerability Details

2
GHSA
GHSA-555g-qrv3-xmx5: bb_smilies↗2022-04-30
▶
CVEList
CVE-2001-0320: bb_smilies↗2001-04-04
▶
CVE-2001-0320 — Francisco Burzi Php-nuke vulnerability | cvebase