Sign-up

ID

VAR-200105-0097


CVE

CVE-2001-0292


TITLE

PHP-Nuke Leak password vulnerability

Trust: 0.6

sources: CNNVD: CNNVD-200105-059

DESCRIPTION

PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator. PHP-Nuke is prone to a remote security vulnerability. PHP-Nuke 4.4.1a is vulnerable

Trust: 1.26

sources: NVD: CVE-2001-0292 // BID: 88877 // VULHUB: VHN-3114

AFFECTED PRODUCTS

vendor:francisco burzimodel:php-nukescope:eqversion:4.4.1a

Trust: 1.6

vendor:franciscomodel:burzi php-nuke ascope:eqversion:4.4.1

Trust: 0.3

sources: BID: 88877 // CNNVD: CNNVD-200105-059 // NVD: CVE-2001-0292

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2001-0292
value: HIGH

Trust: 1.0

CNNVD: CNNVD-200105-059
value: HIGH

Trust: 0.6

VULHUB: VHN-3114
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2001-0292
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-3114
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

sources: VULHUB: VHN-3114 // CNNVD: CNNVD-200105-059 // NVD: CVE-2001-0292

PROBLEMTYPE DATA

problemtype:NVD-CWE-Other

Trust: 1.0

sources: NVD: CVE-2001-0292

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-200105-059

TYPE

unknown

Trust: 0.6

sources: CNNVD: CNNVD-200105-059

EXTERNAL IDS

db:NVDid:CVE-2001-0292

Trust: 2.0

db:CNNVDid:CNNVD-200105-059

Trust: 0.7

db:BUGTRAQid:20010302 PHPNUKE4.4.1A ADVISORY

Trust: 0.6

db:BIDid:88877

Trust: 0.4

db:VULHUBid:VHN-3114

Trust: 0.1

sources: VULHUB: VHN-3114 // BID: 88877 // CNNVD: CNNVD-200105-059 // NVD: CVE-2001-0292

REFERENCES

url:http://archives.neohapsis.com/archives/bugtraq/2001-02/0525.html

Trust: 2.0

sources: VULHUB: VHN-3114 // BID: 88877 // CNNVD: CNNVD-200105-059 // NVD: CVE-2001-0292

CREDITS

Unknown

Trust: 0.3

sources: BID: 88877

SOURCES

db:VULHUBid:VHN-3114
db:BIDid:88877
db:CNNVDid:CNNVD-200105-059
db:NVDid:CVE-2001-0292

LAST UPDATE DATE

2025-04-03T22:39:11.051000+00:00


SOURCES UPDATE DATE

db:VULHUBid:VHN-3114date:2008-09-05T00:00:00
db:BIDid:88877date:2001-05-03T00:00:00
db:CNNVDid:CNNVD-200105-059date:2005-10-20T00:00:00
db:NVDid:CVE-2001-0292date:2025-04-03T01:03:51.193

SOURCES RELEASE DATE

db:VULHUBid:VHN-3114date:2001-05-03T00:00:00
db:BIDid:88877date:2001-05-03T00:00:00
db:CNNVDid:CNNVD-200105-059date:2001-05-03T00:00:00
db:NVDid:CVE-2001-0292date:2001-05-03T04:00:00