CVE-2001-1011

CVE-2001-1011 describes a critical authentication bypass vulnerability in Mambo Site Server versions 3.0.0 through 3.0.5. This flaw allows remote, unauthenticated attackers to gain full Mambo administrator privileges by manipulating the PHPSESSID and other parameters in the index2.php script. With a CVSS score of 10.0, this vulnerability presents a high risk due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. While there is no evidence of active exploitation or public exploit code like Metasploit or Nuclei, the vulnerability has garnered significant community discussion, indicating awareness and potential for future exploitation.