CVE-2001-1011 Auth bypass in n/a

What is CVE-2001-1011?

CVE-2001-1011 is a critical authentication bypass vulnerability in n/a, published on 9 Mar 2002. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.

Which versions are affected by CVE-2001-1011?

It affects 1 product.

Products include Mambo Mambo Site Server.

How do I fix CVE-2001-1011?

No fix has been published for CVE-2001-1011 yet. Limit exposure of the affected software until one is available.

Upgrade, and rotate credentials and sessions that may have been exposed. More about Authentication bypass.

Is CVE-2001-1011 being exploited?

There is no known exploitation of CVE-2001-1011 in the wild and no public exploit code.

Other vulnerabilities in n/a

• CVE-2002-2290 Hardcoded credentials in n/a Critical 10.0
• CVE-2002-1662 Cross-site scripting in n/a Medium 6.8
• CVE-2002-2247 Information disclosure in n/a Medium 5.0
• CVE-2003-1203 Cross-site scripting in n/a Medium 4.3
• CVE-2005-3738 Code injection in n/a Low 2.6

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-mhg7-pmrq-c6wj.