CVE-2000-1023

Alabanza Control Panel - Info Disclosure

Title source: llm
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for CVE-2000-1023. PoCs published by Weihan Leow.

AI-analyzed exploit summary The exploit describes an authentication bypass vulnerability in Alabanza's domain administration software, allowing unauthenticated users to modify, delete, or add domains and DNS records via crafted URLs. The issue stems from improper access control in the `nsManager.cgi` script.

Description

The Alabanza Control Panel does not require passwords to access administrative commands, which allows remote attackers to modify domain name information via the nsManager.cgi CGI program.

Exploits (1)

exploitdb WRITEUP VERIFIED
by Weihan Leow · textremotecgi
https://www.exploit-db.com/exploits/20238

The exploit describes an authentication bypass vulnerability in Alabanza's domain administration software, allowing unauthenticated users to modify, delete, or add domains and DNS records via crafted URLs. The issue stems from improper access control in the `nsManager.cgi` script.

Classification
Writeup 90%
Attack Type
Auth Bypass
Complexity
Trivial
Reliability
Reliable
Target: Alabanza (version unspecified)
No auth needed
Prerequisites: Network access to the target Alabanza host · Knowledge of the target domain and IP address
mistral-large-3 · analyzed Feb 16, 2026 Full analysis →

References (3)

Core 3
Core References
Exploit, Patch, Vendor Advisory vdb-entry x_refsource_bid
http://www.securityfocus.com/bid/1710
Third Party Advisory, VDB Entry vdb-entry x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/5284
Third Party Advisory, VDB Entry mailing-list x_refsource_bugtraq
http://www.securityfocus.com/archive/1/84766

Scores

EPSS 0.0864
EPSS Percentile 94.5%

Details

Status published
Products (1)
alabanza/control_panel < 3.0
Published Dec 11, 2000
Tracked Since Feb 18, 2026