Vulnerability in Francisco Burzi Php-Nuke
CVE-2001-0320
bb_smilies.php and bbcode_ref.php in PHP-Nuke 4.4 allows remote attackers to read arbitrary files and gain PHP administrator privileges by inserting a null character and .. (dot dot) sequences into a malformed username argument.
EPSS: 0.026 (83.5th percentile) — read the EPSS interpretation.
Affected products
- Francisco_burzi Php-nuke — versions 4.0.4, 4.4
- N/a — versions n/a
References
- cve@mitre.org (Vendor Advisory, mailing-list, Exploit, x_refsource_BUGTRAQ)