PHP-Nuke 4.4 Cookie Authentication Bypass Vulnerability

CVE-2001-0001 · HIGH Severity

AV:N/AC:L/AU:N/C:P/I:P/A:P

cookiedecode function in PHP-Nuke 4.4 allows users to bypass authentication and gain access to other user accounts by extracting the authentication information from a cookie.

Learn more about our User Device Pen Test.