Vulnerability in Francisco Burzi Php-Nuke

CVE-2000-0745

admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd parameter.

EPSS: 0.121 (95.7th percentile) — read the EPSS interpretation.

Affected products

Francisco_burzi Php-nuke — versions 1.0, 2.5
N/a — versions n/a

References

cve@mitre.org (x_refsource_OSVDB, vdb-entry)
cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ, Patch)
cve@mitre.org (Exploit, Patch, vdb-entry, x_refsource_BID, Vendor Advisory)