CVE-2001-0292
PHP-Nuke 4.4.1a allows remote attackers to modify a user's email address and obtain the password by guessing the user id (UID) and calling user.php with the saveuser operator.
- Score
- CVSS 2.0 7.5 High
- Status
- Modified - cve@mitre.org
- Published
- 2001-05-03
- Last modified
- 2024-08-08
Affected products
References
- http://archives.neohapsis.com/archives/bugtraq/2001-02/0525.html
