admin.php3 in PHP-Nuke does not properly verify the PHP-Nuke administrator password, which allows remote attackers to gain privileges by requesting a URL that does not specify the aid or pwd parameter.
From 神龙GPT (AIGC)
在PHP-Nuke中的admin.php3 未能正确验证PHP-Nuke管理员密码，这允许远程攻击者通过请求一个未指定 aid 或 pwd 参数的URL来获取权限。