admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd parameter.
| Software | From | Fixed in |
|---|---|---|
| francisco_burzi / php-nuke | 1.0 | 1.0.x |
| francisco_burzi / php-nuke | 2.5 | 2.5.x |