CVE-2001-0383

MediumCVSS 5.0/10Last modified Jun 16, 2026

Description

banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication.

Metrics

CVSS 2.0 5.0/10AV:N/AC:L/Au:N/C:N/I:P/A:N

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

Timeline

Published: Jun 18, 2001
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2001

CVE-2001-03842.1ppd in Reliant Sinix allows local users to corrupt arbitrary files via a symlink attack in the /tmp/ppd.trace file.CVE-2001-03855.0GoAhead webserver 2.1 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.CVE-2001-03865.0AnalogX SimpleServer:WWW 1.08 allows remote attackers to cause a denial of service via an HTTP request to the /aux directory.CVE-2001-03877.2Format string vulnerability in hfaxd in HylaFAX before 4.1.b2_2 allows local users to gain privileges via the -q command line argument.CVE-2001-038810.0time server daemon timed allows remote attackers to cause a denial of service via malformed packets.CVE-2001-03895.0IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to determine the real path of the server by directly calling the macro.d2w macro wi CVE-2001-03905.0IBM Websphere/NetCommerce3 3.1.2 allows remote attackers to cause a denial of service by directly calling the macro.d2w macro with a long st CVE-2001-03915.0Xitami 2.5d4 and earlier allows remote attackers to crash the server via an HTTP request to the /aux directory.CVE-2001-03925.0Navision Financials Server 2.60 and earlier allows remote attackers to cause a denial of service by sending a null character and a long stri CVE-2001-03935.0Navision Financials Server 2.0 allows remote attackers to cause a denial of service via a series of connections to the server without provid CVE-2001-03945.0Remote manager service in Website Pro 3.0.37 allows remote attackers to cause a denial of service via a series of malformed HTTP requests to CVE-2001-03959.8Lightwave ConsoleServer 3200 does not disconnect users after unsuccessful login attempts, which could allow remote attackers to conduct brut