CVE-2001-0320

CVE-2001-0320 describes a critical path traversal vulnerability in PHP-Nuke version 4.4, specifically within the bb_smilies.php and bbcode_ref.php scripts. This flaw allows unauthenticated remote attackers to read arbitrary files and potentially gain PHP administrator privileges by manipulating the username argument with null characters and directory traversal sequences. With a CVSS score of 10.0 (HIGH), the vulnerability is easily exploitable over the network with low attack complexity, leading to complete compromise of confidentiality, integrity, and availability. Despite its severity, there is no evidence of active exploitation, publicly available exploit code in Metasploit or ExploitDB, or significant community discussion surrounding this nearly two-decade-old vulnerability.