10
CVE-2001-1011
- EPSS 4.43%
- Veröffentlicht 25.07.2001 04:00:00
- Zuletzt bearbeitet 16.06.2026 21:55:24
- Quelle cve@mitre.org
- CVE-Watchlists
- Unerledigt
Loginindex2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Mambo ≫ Mambo Site Server Version3.0
Mambo ≫ Mambo Site Server Version3.0.1
Mambo ≫ Mambo Site Server Version3.0.2
Mambo ≫ Mambo Site Server Version3.0.3
Mambo ≫ Mambo Site Server Version3.0.4
Mambo ≫ Mambo Site Server Version3.0.5
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.43% | 0.901 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 10 | 10 | 10 |
AV:N/AC:L/Au:N/C:C/I:C/A:C
|
http://archives.neohapsis.com/archives/bugtraq/2001-07/0569.html
http://prdownloads.sourceforge.net/mambo/mambov3.0.6.tar.gz
http://www.osvdb.org/1911
http://www.securityfocus.com/bid/3093
https://exchange.xforce.ibmcloud.com/vulnerabilities/6910