Description
membership.asp in Mini-Nuke 2.3 and earlier uses plaintext security codes, which allows remote attackers to register multiple times via automated scripts.
References
- 20317 third-party-advisory
- 20060528 Advisory: MiniNuke v2.x Multiple Remote Vulnerabilities mailing-list
- http://www.nukedx.com/?viewdoc=31
- http://www.nukedx.com/?getxpl=31
- 1002 third-party-advisory