CVE-2001-1032: admin.php in PHP-Nuke 5.2 and earlier, except 5.0RC1, does not check login credentials for upload operation...

Security readout for executives and security teams

CVE-2001-1032 affects legacy PHP-Nuke versions. A missing login check in admin.php can let a remote attacker upload or copy arbitrary files and read the site configuration. For any still-running exposed instance, the business risk is potential site takeover and credential disclosure. Exposure is likely limited to obsolete PHP-Nuke deployments, especially internet-facing sites running version 5.2 or earlier. The bundle lacks reliable CPE data, so validation depends on asset discovery and application version confirmation. Prioritize remediation if any affected instance is internet-facing. Although old, the issue combines unauthenticated remote access, arbitrary file upload, and configuration disclosure, which can create direct compromise paths. Mitigation focus: Identify any PHP-Nuke deployments and confirm version exposure.; Remove, retire, or isolate affected legacy instances from the internet.; Check vendor or archived project guidance for fixed versions or official remediation..

Prepared

Jul 1, 2026, 06:34 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.