CVE-2001-0292: High severity Francisco Burzi PHP-Nuke vulnerability

Published Apr 4, 2001

Updated

PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator.

Affected Software

1 affected component

Francisco Burzi PHP-Nuke=4.4.1a

Event History

Apr 4, 2001

CVE Published

via MITRE·08:00 AM

Data Sourced

via MITRE·08:00 AM

Description

Frequently Asked Questions

What is the severity of CVE-2001-0292?

CVE-2001-0292 is considered a high severity vulnerability due to its potential to allow unauthorized access to user credentials.

How does CVE-2001-0292 exploit user data?

CVE-2001-0292 allows attackers to change a user's email address and retrieve the password by guessing the user ID and manipulating the user.php script.

What versions of PHP-Nuke are affected by CVE-2001-0292?

CVE-2001-0292 specifically affects PHP-Nuke version 4.4.1a.

How can I mitigate CVE-2001-0292?

To mitigate CVE-2001-0292, it is recommended to update PHP-Nuke to a patched version that resolves this vulnerability.

Is CVE-2001-0292 considered a serious threat to PHP-Nuke users?

Yes, CVE-2001-0292 poses a serious threat as it allows attackers to manipulate user information and compromise account security.