CVE-2006-0203: Mini-Nuke CMS System

Medium severity, CVSS 5.0. EPSS: 2% chance of exploitation in the next 30 days.

membership.asp in Mini-Nuke CMS System 1.8.2 and earlier does not verify the old password when changing a password, which allows remote attackers to change the passwords of other members via a lostpassnew action with a modified x parameter.

Affected products

• Mini-Nuke CMS System: up to and including 1.8.2

Published 2006-01-13. Last modified 2026-06-16.