CVE-2001-1053 AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.
HighCVSS 10.0
EPSS 3.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
AdLogin.pm in AdCycle 1.15 and earlier allows remote attackers to bypass authentication and gain privileges by injecting SQL code in the $password argument.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| adcycle | = 0.77 | No fix listed |
| adcycle | = 0.77b | No fix listed |
| adcycle | = 0.78b | No fix listed |
| adcycle | = 1.0 | No fix listed |
| adcycle | = 1.12 | No fix listed |
| adcycle | = 1.13 | No fix listed |
| adcycle | = 1.14 | No fix listed |
| adcycle | = 1.15 | No fix listed |
References
- 20010713 AdCycle SQL Command Insertion Vulnerability - qDefense Advisory Number QDAV-2001-7-2 exploit mailing-list patch vendor-advisory
- www.adcycle.com
- 3032 exploit patch vdb-entry vendor-advisory
- adcycle-insert-sql-command(6837) vdb-entry