CVE-2001-1032

admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers to copy and upload…

published June 25, 2002

CVSS
—
EPSS
3%
Percentile
87.7
In the wild
Unconfirmed
What it is

admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers to copy and upload arbitrary files and read the PHP-Nuke configuration file by directly calling admin.php with an upload parameter and specifying the file to copy.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03124 · 87.7th percentile
Published
2002-06-25T04:00Z
EPSS history
Timeline
  • 25 JUN 04:00Z
    admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operations, which allows remote attackers to copy and upload…
    cvelistv5