EDB-20729

functional

PHP-Nuke 1.0/2.5/3.0/4.x - Remote Ad Banner URL Change

view exploit source exploit_dbverifiedtype webappsauthor Juan Diegopublished 2001-04-02catalog exploit_db
01

exploited CVEs (1)

Known CVEs related to this entry.

IDseverity exploitable
CVE-2001-0383USmedium5.0OT elevatedExploit
banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication.
scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.

Free scan