CVE-2001-1011

Description

index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/6910

http://www.securityfocus.com/bid/3093

http://www.osvdb.org/1911

http://prdownloads.sourceforge.net/mambo/mambov3.0.6.tar.gz

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS