CVE-2003-1245

CVE-2003-1245 describes a critical vulnerability in Mambo 4.0.12, where remote attackers can gain administrator access by manipulating the session_id parameter in index2.php with an MD5 hash of a session cookie. This vulnerability carries a CVSS score of 10.0, indicating a severe risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While not listed in CISA's KEV catalog, an ExploitDB entry exists, and the vulnerability has garnered significant community discussion, suggesting awareness and potential for exploitation.