PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2001-11-20 21:00
Updated : 2017-12-18 18:29
NVD link : CVE-2001-0911
Mitre link : CVE-2001-0911
JSON object : View
CWE
Products Affected
francisco_burzi
- php-nuke
postnuke_software_foundation
- postnuke