Asp-Nuke: >> Asp-Nuke >> 1.3 Security Vulnerabilities
default.asp in ASP-Nuke Community 1.5 and earlier allows remote attackers to gain privileges by setting certain pseudo cookie values.
CVSS Score
8.5
EPSS Score
0.053
Published
2007-03-07
ASP-Nuke 1.3 and earlier places user credentials under the web document root with insufficient access control, which allows remote attackers to obtain sensitive information via a direct request to main.mdb.
CVSS Score
5.0
EPSS Score
0.05
Published
2004-12-31