CVEvulnerability

CVE-2001-1011

10.0 HIGH Published 2001-07-25 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2001-07-25
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
10.0 HIGH — AV:N/AC:L/Au:N/C:C/I:C/A:C

Description

index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.

Affected configurations

• mambo mambo site server 3.0 • mambo mambo site server 3.0.1 • mambo mambo site server 3.0.2 • mambo mambo site server 3.0.3 • mambo mambo site server 3.0.4 • mambo mambo site server 3.0.5

References