CVE-2001-0383: Francisco Burzi PHP-Nuke

Medium severity, CVSS 5.0. EPSS: 6.5% chance of exploitation in the next 30 days.

banners.php in PHP-Nuke 4.4 and earlier allows remote attackers to modify banner ad URLs by directly calling the Change operation, which does not require authentication.

Affected products

• Francisco Burzi PHP-Nuke: up to and including 4.4

Published 2001-06-18. Last modified 2026-06-16.