What’s Vulnerable › Vulnerabilities

CVE-2001-0911

• Severity: high (CVSS 7.5 v2.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 3.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2001-11-21 · updated 2026-06-16

Description

PHP-Nuke 5.1 stores user and administrator passwords in a base-64 encoded cookie, which could allow remote attackers to gain privileges by stealing or sniffing the cookie and decoding it.

Affected products

• Francisco Burzi Php-Nuke: 5.1, 5.2, 5.3.1
• Postnuke Software Foundation Postnuke: 0.64

References

• http://marc.info/?l=bugtraq&m=100638850219503&w=2
• http://www.securityfocus.com/bid/3567
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7596
• http://marc.info/?l=bugtraq&m=100638850219503&w=2
• http://www.securityfocus.com/bid/3567
• https://exchange.xforce.ibmcloud.com/vulnerabilities/7596

Get alerted when CVE-2001-0911 or the next vulnerability affects your stack