CVE-2001-0911

Published: Nov 21, 2001Modified: Apr 16, 2026

7.5

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Exploitability: 10.0 / Impact: 6.4

Source: NVD

Description

PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it.

Affected (4)

Products: Francisco Burzi: Php Nuke · Postnuke Software Foundation: Postnuke

Francisco Burzi

1 product

Php Nuke

Postnuke Software Foundation

1 product

Postnuke

Configuration A

4 vulnerable

Vulnerable Software	Affected Versions
Francisco Burzi Php Nuke	Version 5.1
Francisco Burzi Php Nuke	Version 5.2
Francisco Burzi Php Nuke	Version 5.3.1
Postnuke Software Foundation Postnuke	Version 0.64

References (6)

http://marc.info/?l=bugtraq&m=100638850219503&w=2

Source: cve@mitre.org

http://www.securityfocus.com/bid/3567

Source: cve@mitre.org

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/7596

Source: cve@mitre.org

http://marc.info/?l=bugtraq&m=100638850219503&w=2

Source: af854a3a-2127-422b-91ae-364da2661108

http://www.securityfocus.com/bid/3567

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

https://exchange.xforce.ibmcloud.com/vulnerabilities/7596

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.