VYPR
Unrated severityNVD Advisory· Published Jul 25, 2001· Updated Apr 16, 2026

CVE-2001-1011

CVE-2001-1011

Description

index2.php in Mambo Site Server 3.0.0 through 3.0.5 allows remote attackers to gain Mambo administrator privileges by setting the PHPSESSID parameter and providing the appropriate administrator information in other parameters.

Affected products

6
  • cpe:2.3:a:mambo:mambo_site_server:3.0:*:*:*:*:*:*:*+ 5 more
    • cpe:2.3:a:mambo:mambo_site_server:3.0:*:*:*:*:*:*:*
    • cpe:2.3:a:mambo:mambo_site_server:3.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:mambo:mambo_site_server:3.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:mambo:mambo_site_server:3.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:mambo:mambo_site_server:3.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:mambo:mambo_site_server:3.0.5:*:*:*:*:*:*:*

Patches

0

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

5

News mentions

0

No linked articles in our index yet.