Unscored CVE-2001-0001 EUVD-2001-0001GHSA-xf5w-5cjx-254f

cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authen…

Published Mar 9, 2002 · Updated Aug 8, 2024 · Assigned by mitre

Description

cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie.

References

php-nuke-elevate-privileges(6183) vdb-entry
20010213 RFP2101: RFPlutonium to fuel your PHP-Nuke mailing-list