Description
PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator.
References
- 20010302 PHPNUKE4.4.1a Advisory mailing-list
Unscored
CVE-2001-0292
EUVD-2001-0292GHSA-354c-qvr6-3hcp
PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling …
Published Apr 4, 2001 · Updated Aug 8, 2024 · Assigned by mitre