CVE-2001-0854 — Burzi Php-nuke vulnerability

3 documents3 sources
Severity
5.0MEDIUMNVD
EPSS
0.0%
top 94.67%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Francisco Burzi Php-nuke
Timeline
PublishedDec 6
Latest updateApr 30

Description

PHP-Nuke 5.2 allows remote attackers to copy and delete arbitrary files by calling case.filemanager.php with admin.php as an argument, which sets the $PHP_SELF variable and makes it appear that case.filemanager.php is being called by admin.php instead of the user.

CVSS vector

AV:N/AC:L/C:N/I:P/A:NExploitability: 10.0 | Impact: 2.9

Affected Packages1 packages

🔴Vulnerability Details

2
GHSA
GHSA-hx7r-qxxr-89cp: PHP-Nuke 5↗2022-04-30
▶
CVEList
CVE-2001-0854: PHP-Nuke 5↗2001-11-22
▶
CVE-2001-0854 — Francisco Burzi Php-nuke vulnerability | cvebase