CVE-2001-1011

Опубликовано: 25 июл. 2001

Источник: nvd

CVSS2: 10

EPSS Низкий

Описание

index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.

Ссылки

http://archives.neohapsis.com/archives/bugtraq/2001-07/0569.html
Exploit
Vendor Advisory
http://prdownloads.sourceforge.net/mambo/mambov3.0.6.tar.gz
http://www.osvdb.org/1911
http://www.securityfocus.com/bid/3093
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6910
http://archives.neohapsis.com/archives/bugtraq/2001-07/0569.html
Exploit
Vendor Advisory
http://prdownloads.sourceforge.net/mambo/mambov3.0.6.tar.gz
http://www.osvdb.org/1911
http://www.securityfocus.com/bid/3093
Patch
Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/6910

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:mambo:mambo_site_server:3.0:*:*:*:*:*:*:*

cpe:2.3:a:mambo:mambo_site_server:3.0.1:*:*:*:*:*:*:*

cpe:2.3:a:mambo:mambo_site_server:3.0.2:*:*:*:*:*:*:*

cpe:2.3:a:mambo:mambo_site_server:3.0.3:*:*:*:*:*:*:*

cpe:2.3:a:mambo:mambo_site_server:3.0.4:*:*:*:*:*:*:*

cpe:2.3:a:mambo:mambo_site_server:3.0.5:*:*:*:*:*:*:*

EPSS

Процентиль: 82%

0.01703

Низкий

10 Critical

CVSS2

Дефекты

NVD-CWE-Other

Связанные уязвимости

GHSA-mhg7-pmrq-c6wj

github

больше 3 лет назад